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Introduction 
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1.2 Other Resources 2 


1.1 Document Overview 


This document is designed to help you understand the Wind River On-Chip 
Debugging solution. For On-Chip Debugging, Wind River provides the 

Wind River ICE SX and Wind River Probe emulators and the Wind River 
Workbench development suite. Together, these products provide a fully integrated 
hardware and software solution for board bring-up, flash programming, 
production, and testing. 


Wind River emulators allow you to perform source-level debug activities such as 
watching memory and controlling large numbers of registers. 


Wind River emulators let you control a target by using the On-Chip Debugging 
(OCD) services embedded in the microprocessor of that target. An emulator 
operates effectively as a standalone system, communicating with the OCD services 
resident in the microcode of the chip. 


When you access the OCD services in a chip, you gain complete control of the 
microprocessor, and all interaction between the emulator and the target runs 
exclusively through the OCD connection. This means that the emulation system is 
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effective for the entire development process, even before board-level peripherals 
are stable. 


This document describes common use cases for the Wind River ICE SX and 
Wind River Probe emulators, including: 


« Setting up OS-independent projects. 

« Debugging Linux targets. 

« Working with registers and register groups. 

« Programming flash memory. 

« Creating, editing, and using board descriptor files. 
« Debugging multiple cores. 

« Tracing executing code. 

« Performing statistical profiling analysis on executing code. 
« Examining cache on your target. 

« Flashing a Linux boot loader on your target. 

« Flashing a VxWorks boot ROM on your target. 


« Downloading an image to your target without using a boot ROM or boot 
loader. 


This document provides a collection of tutorials for the operations described 
above, and provides step-by-step instructions on how to perform them using 
Wind River Workbench. 


1.2 Other Resources 


For information on the Wind River ICE SX and Wind River Probe, including 
hardware information, establishing communications with Wind River Workbench, 
and defining launch configurations, see the Wind River ICE SX for Wind River 
Workbench Hardware Reference or the Wind River Probe for Wind River Workbench 
Hardware Reference. 


1 Introduction 
1.2 Other Resources 


For information on low-level commands available for the Wind River ICE SX and 
Wind River Probe, see the Wind River Workbench for On-Chip Debugging Command 
Reference. 


For information on configuration options for the Wind River ICE SX and 
Wind River Probe, see the Wind River Workbench for On-Chip Debugging 
Configuration Options Reference. 


For information on Wind River Workbench, see the Wind River Workbench User’s 
Guide. 
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2.1 Introduction 
This chapter provides a tutorial on basic operation of Wind River Workbench for 
On-Chip Debugging (OCD). 


You can use Wind River Workbench to run and debug code either in combination 
with the Workbench project management utility, or without a project. This chapter 
assumes you are debugging with a Workbench project. For a tutorial on debugging 
without a Workbench project, see 3. Basic Operation: Debugging Without a Project. 


This tutorial includes the following topics: 
* Launching Wind River Workbench. 
* Connecting to a Wind River emulator and a target processor. 


* Creating a sample project. 
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« Building a sample project. 
« Downloading code to the target. 


« Debugging code running on the target. 


2.2 Connecting to the Target 
First, open Workbench according to the method for your host computer. 


Linux/Solaris Hosts 
From your installation directory, issue the command 


S ./startWorkbench.sh 
Windows Hosts 
Select Start > All Programs > Wind River > Wind River Workbench version. 


On Windows hosts, Workbench prompts you to specify a workspace location. 
Linux and Solaris hosts use the default location installDir/workspace. 


The Welcome screen appears. 


2 Basic Operation: Debugging with a Project 
2.2 Connecting to the Target 


Welcome to Wind River Workbench 2.6 


WIND RIVER 


WWW.WINDRIVER.COM 


9m ¢ 


= © 


{ry 
Workbench 


1. Click Workbench. 


Workbench opens, displaying the Quick Target Launch dialog. 
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Wind River On Chip Debugging 
@ Choose How You Want to Start 


Defined Launches 
Create a new launch configuration 


Edit an existing launch configuration 
Connect, Attach, Reset and Download 


Sync with target and download symbols 


Do not show this dialog on startup 


Workbench saves all information regarding a particular emulator-target 
connection in a launch configuration. The launch configuration includes such 
configuration information as emulator type, target processor family, target 
CPU, and host-PC interface port, plus any port parameters such as IP address 
(if using a Wind River ICE SX), serial number (if using a Wind River Probe) or 
baudrate. 


Once you have defined an emulator-target connection, Workbench saves it in 
the workspace folder. The next time you open Workbench, that launch 
configuration will appear in the Defined Launches area of the Quick Target 
Launch dialog, and you can return to it by highlighting it and clicking 
Connect, Attach, Reset and Download. 


The Quick Target Launch dialog opens automatically any time you launch 
Workbench. If you do not want to use the Quick Target Launch, select the Do 
not show this dialog on startup checkbox and click Close. You can open the 
Quick Target launch dialog at any time by clicking the OCD Quick Launch 
button in the Workbench toolbar. 


Since this is the first time you have opened Workbench, there are no existing 
launch configurations, and you must create one. 


2. Select Create a new launch configuration. 


The Connection Type dialog appears. 


2 Basic Operation: Debugging with a Project 
2.2 Connecting to the Target 


¥ New Connection 


Connection Type 


Please select connection type. 


Wind River OCD ICE Connection 

Wind River OCD 15S Connection 

Wind River VxWorks 6.x Core Dump Connection 
Wind River ¥xWorks 6.x Simulator Connection 
Wind River ¥xWorks 6.x Target Server Connection 


Cancel 


Select your connection type (Wind River ICE SX, Wind River Probe, or Wind 
River Instruction Set Simulator) and click Next. 


For instance, the examples in this tutorial show a Wind River Probe emulator 


connected to a Wind River PPMC750FX target, so you would select Wind 
River OCD Probe connection. 


The Processor Selection dialog appears. 
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W) New Connection 


Wind River Probe Settings 


Configure the designator settings for the emulator. 


Designators 
@)Processor: | PPC7SOFX 


© Board file: 


Processor Plugin 


Processor 


¥  Designator 


VM) PPC?SOFX PPC?SOFX PowerPC 7xx Family Process... | 


Auto-attach to connected designators 


Communications 
USB Device Name; | PRO40310 


4. Click Select. From the list that appears, expand MPC7xx and select PPC750FX. 
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6. 


2 Basic Operation: Debugging with a Project 
2.2 Connecting to the Target 


% Processor Selection 


Current Connection - Wind River Probe : PPC750F 


|  MPCOxx 

) MPC? 4xx 

=) MPC? xx 
MPC740 
MPC745 
MPC750 
MPC755 
PPC740 
PPC745 
PPC7S0 
PPC7S0CX 
PPC7SOCKE 
PPC7SOCKR 


PPC7S0GX 
PPCFsnl 


NS 


Cancel 


. Make sure the Auto-attach to connected designators checkbox is selected and 
click OK. 


You are returned to the Processor Selection dialog. 
Click Next. 
The Target Operating System Settings dialog appears. 
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% New Connection 


Target Operating System Settings 


Select the target operating system which is currently booted on the 
configured target. 


Available CPU{s) on target board: 


Target operating system settings 
Booted Target OS on selected CPU: | None 


Description: 
Providing plugin: 


Kernel image: | Browse... 


Kernel image is optional for None 


Target 05 plugin pass-through options: 


7. Inthe Booted Target OS on selected CPU field, select the operating system 
that is running on your target processor. The default is None. 


8. Next to the Kernel Image field, click Browse to navigate to the kernel image 
you wish to specify. If you selected None in the previous step, you do not need 
to specify a kernel image. 


9. Ifyou are using a Linux plug-in, specify the pass-through options in the Target 
OS Pass-Through Options field. If you are not using a Linux plug-in, skip this 
step. 


Options are passed as pairs in the format name="value’. Separate options with 
a comma. The following options are available: 


* notasklist=1 : Never fetch process list. 


*"  noautomodules=1 : Do not plant internal breakpoints to do automatic 
kernel module load/unload detection. When this option is specified, you 
must manually refresh to see an updated module list. 
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* noloadcheck=1 : Do not issue gophers until the hardware breakpoint is 
used to detect kernel load triggers. This option is for “sensitive” boards 


that don’t accept access until the kernel loads and sets up memory 
mapping. 
* loaddetectloc=symbol or address: Set the hardware breakpoint used to 


detect kernel load at symbol (for example, loaddetectloc=start_kernel) or 


address (for example, loaddetectloc=0x1000). If you do not specify a 


symbol or address, Workbench uses a default. For most architectures the 


default is start_kernel; for PowerPC targets, the default is 0x0. 
10. Click Next. 
The Memory Options dialog appears. 


4 New Connection 


Memory Options 


Specify the memory options for the target cpu. 


Available CPU(s) on target board: 


Memory mapping 


Offset Attributes 


Undefined memory areas accessible 


Cancel 


Use the Memory Options dialog to specify how memory on the target is 
partitioned, and what the attributes of the particular memory regions are. 


NOTE: The Memory Options dialog is only necessary for Linux or other 
non-VxWorks target operating systems. 
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To specify an area of memory, click Add. 


The Set Memory Map dialog appears. 


% Memory mapping 


Please specify the offset, size and attributes for the memory mapping. 


Offset: _Sxoa000000 
Size: 600000000 


Attributes 


[J Invalid 


__|Read 
Access size (bit): 


Default access size (bit): 


[| Write 
Access size (bit): 


Default access size (bit): 


(JRead/Write 
Access size (bit): 


Default access size (bit): 


Use the Set Memory Map dialog to specify which memory areas are read-only, 


read-write, or write-only, and to specify the access width Workbench should 
use to read the data from those regions. 


11. Click Next. 


The Object Path Mappings dialog appears. 
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W New Connection 


Object Path Mappings 


Specify how files in the target file system are visible in the host file system. 


Available CPU{s) on target board: 


Load module symbols to debug server automatically iF possible 


Pathname prefix mappings: 


¥ Target Path Host Path 


<leave path unchanged> 


»| (eam. 


Basename mappings: 
[*;*.unstripped],[*;*] 


| 


Use the Object Path Mappings dialog to specify how files in the target file 
system are visible in the host file system. 


12. ‘To adda host or target path, click Add... and type the path in the dialog that 
appears. 


13. Click Next. 
The Target State Refresh dialog appears. 
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W New Connection 


Target State Refresh 


Configure the core{s) target states refresh settings. 


Available CPU(s) on target board: [Pceseo 


Initial target state query settings 
[_] Query target object lists and target object states on connect 


|] Query target object state(s) on stopped events 


Query target object state(s) on running events (receiving object only) 


Target state refresh settings 
@Refresh the target state manually only 


O Auto-refresh the target state periodically 


(listen to execution context life-cycle events (context-start, context-exit) 
It is not known if life-cycle events for execution contexts are provided, 


Use the Target State Refresh dialog to configure the target state query and 
target state refresh settings on your target processor. 


14. Click Next. 
The Default Breakpoint Options dialog appears. 
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2.2 Connecting to the Target 


W, New Connection 


Default Breakpoint Options 


Select the default breakpoint options for newly created breakpoints. 


Available CPL(s) on target board: 


Default Breakpoint Stop Scope 
O Stop all 
©) Stop triggering thread 


(tek Cees) res | Cee) 


Use this dialog to set default breakpoint options for newly created 
breakpoints. 


15. Click Next. 


The Connection Summary dialog appears. Inspect the displayed values to 
make sure they are correct. 
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® New Connection 


Connection Summary 


Please review the connection information 


Connection name: | WRProbe_PPC7S0FX_0 : 


Summary 


Property Value 
ADDR PRO40310 
AutoAttachConnectedCon true 

| DESIGNATORMAP 

DEVICE Wind River Probe 
NAME_MAPPING [*;*.unstripped],[*;*] 
PATH_MAPPING (Jd 
STYLE USBDEVICE 


Immediately connect to target if possible 


Ce) 


16. Make sure that the Immediately connect to target if possible checkbox is 
selected and click Finish. 


Workbench creates a target connection called WRProbe_PPC750FX in the 
Target Manager view. 


The Reset and Download view appears. 


17. Click Close in the Reset and Download view. 


2.3 Creating a Project 


This tutorial uses the C Demonstration Program, which is included in your 
Workbench installation. 


1. Inthe Workbench toolbar, select File > New > Project. 
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The New Project wizard appears. 


Wy New Project 


Select a wizard 


Creates a new OS-agnostic sample project 


Wizards: 


type Filter text 


4 (> ¥xWorks 5.5 
& VxWorks 6.x 
& VxWorks 653 
+ Wind River Linux 
=) & Examples 
(Ce Native Sample Project 
a 
(A? VxWorks 5.5 Downloadable Application Sample Project 
IH} VxWorks Downloadable Kernel Module Sample Project 
\P? ¥xWorks Real Time Process Sample Project 
(% Wind River Linux Application Sample Project 
(2 Wind River Linux User-Defined Sample Project 


[| Show All Wizards. 


Cancel 


2. Expand the Examples folder and select Standalone Sample Project. 
3. Click Next. 


A sample project template appears. 
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% New Project Sample 


Sample Project Template 


Select a sample project template. 


Available Examples: Information: 


C Demonstration Program C Demonstration Program 


(C++ Demonstration Program This program demonstrates various C 
[S$ The Ball Demonstration Program language features including structures, 


~ ‘ character arrays, linked lists, and 
1S The Panel Demonstration Program FecursOn: 


You can build and download this program 
to your simulator or target board, The 
default RAM location for the program is 
0x00014000, To change the default 
memory address, edit the simple. lk linker 
command file, 


Features 


The Following Features are demonstrated 
From main(}: 


® Factorials: The FactorialDemot} 
__ function generates 4 factorial table 


4. Select C Demonstration Program and click Finish. 


Workbench creates the sample project in the default workspace folder and 
opens the Application Development perspective. 


5. Inthe Project Navigator view, expand the c_demo_sa project. 
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Symbol Br... 


c_demo_sa (Wind River Standalone (No Operating ‘ 
(ii cdemo. elf (MCF-0x00000000-BE-diab_DEBUG) 
ad 4RM-0x00000000-BE-diab_DEBUG 
BS ag 4RM-0x00000000-LE-diab_DEBUG 
e& 4RM-0x04000000-BE-diab_DEBUG 
ad 4RM-0x04000000-LE-diab_DEBUG 
e& ARM-0x08000000-BE-diab_DEBUG 
e& 4RM-0x08000000-LE-diab_DEBUG 
ee MCF-0x00000000-BE-diab_DEBUG 
@? mcF-0x20000000-BE-diab_DEBUIG 
ee MCF-0x40000000-BE-diab_DEBUG 
ee MIPS32-4KEc-BE-16bit-diab_DEBUG 
ee MIPS32-4KEc-BE-32bit-diab_DEBUG 
(29 mips32-4KEc-LE-16bit-diab_DEBUG 
ae MIPS32-4KEc-LE-32bit-diab_DEBUG 
e& MIPS32-4Kx-BE-32bit-diab_DEBUG 
ad MIPS32-4Kx-LE-32bit-diab_DEBUG 
e& MIPS32-BCM-BE-32bit-diab_DEBUG 
ee MIPS32-BCM-LE-32bit-diab_DEBUG 
a MIPS32-IDT-BE-32bit-diab_DEBUG 
(29 mips32-IDT-LE-32bit-diab_DEBUIG 
ee MIPS32-PHI-BE-32bit-diab_DEBUG 
ae MIPS32-PHI-LE-32bit-diab_DEBUG 


HH HHH HHH HHP HHH HHH BB 


6. To build the sample project for use with a PowerPC target, right-click on the 
c_demo_sa top-level folder and select Build Options > Set Active Build Spec. 


The Set Active Build Spec and Debug Mode dialog appears. 
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W Set Active Build Spec and Debug Mode (x) 


PPC 
PPC60Sdiab-WISS 
MIPS32-4KEc-BE-16bit-diab 
MIPS32-4KEc-LE-16bit-diab 
MIPS32-4KEc-BE-32bit-diab 
MIPS32-4KEc-LE-32bit-diab 
MIPS32-4Kx-BE-32bit-diab 
MIPS32-4Kx-LE-32bit-diab 
MIPS32-BCM-BE-32bit-diab 
MIPS32-BCM-LE-32bit-diab 
MIPS32-IDT-BE-32bit-diab 
MIPS32-IDT-LE-32bit-diab 
MIPS32-PHI-BE-32bit-diab 
MIPS32-PHI-LE-32bit-diab 
MIPS32-PNX-BE-16bit-diab 


Debug mode (use debug mode flags) 


7. Scroll to the top and highlight PPC603diab. 


8. Select Debug mode (use debug mode flags) so Workbench will generate 
symbolic debug information. 


9. Click OK. 
10. Right-click on the project name and select Rebuild Project. 


Workbench builds the sample project. The results of the project build appear 
in the Build Console view. 


Error Log Tasks Problems Properties (RIN: :/etrs ae. 4 Terminal Console 


Selictsicgeay 
Teco” CUHNaing Fr ooUsuIaD Wi _OLUUS uate, UC yy “AUCUUg~ Uvalde “tr Pr CUUsLo Windiss “OU TOCL_T Aric Tae “Oo TOCr=uiae 
S_DEBUG/date.o" -c "date.c" “ 
building PPC603diab-WISS_DEBUG/date.o 
echo “building PPC603diab-WISS_DEBUG/math.o";dec -g -Xdebug-dwarf2 -t~PPC603ES:windiss -DTOOL_FAMILY=diab -DTOOL=diat 
5_DEBUG/math.o" -c "math.c" 
building PPC603diab-WISS_DEBUG/math.o 
echo "building PPC603diab-WI55_DEBUG/addone.o";das -tPPC603ES:windiss -DTOOL_FAMILY=diab -DTOOL=diab -DPowerPC -DP 
building PPC603diab-WISS_DEBUG/addone.o 
echo "building PPC603diab-WISS_DEBUG/cdemo.elf"; did -o "PPC603diab-WI55_DEBUG/cdemo. elf" -tPPC603ES:windiss cdemo-PO' 
5_DEBUG/cdemo.o PPC603diab-WI5SS_DEBUG/strutils.o PPC603diab-WI55_DEBUG/engineer.o PPC603diab-WI55_DEBUG/calendar — 
ath.o PPC603diab-WISS_DEBUG/addone.o = iF [[ "0" = "1" ]; then echo "building Run plink utility";plink PPC603diab-WI55_DEBUG) 
building PPC603diab-WISS_DEBUG/cdemo.elf = 
make: built targets of C:/WindRiver{workspace/c_demo_sa 


< M 
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2.3.1 Downloading the Sample Code 


To run the sample code, use the following steps: 


1. Inthe Target Manager, highlight the target connection name 
WRProbe_PPC750FX. 


2. Inthe Project Navigator view, right-click on cdemo.elf and select Reset and 
Download. 


The Reset and Download view appears. 


% WRProbe_PPC750FX - PPC750FX 


Modify attributes and launch. 


Name: | WRProbe_PPC7SOFX - PPC7SOFX 


/< Main gd Reset @# Download | Instruction Pointer # Run Options ** Projects to Build | 7 Source [| Common 


Connection 


| Create 4 New Target Connection ] 


Connection to use: | WRProbe_PPC7S0FX (localhost) ¥| (Hide unconnected 


WRProbe_PPC7SOFX - WRProbe_PPC7SOFX is connected, 


Core: | PPC7S0F% v| 


3. Leave all settings at their defaults and click Debug. 
The OCD Console view opens. 
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‘Error Log Tasks Problems Properties Build Console Terminal Console OCD Console X 


Testing JT4G Communication Passed 

Attempting to restore CPU context Passed 
C:\WindRiver\workspace\c_demo_sa\PPC603diab-WISS5_DEBUG\cdemo. elf 

Loading symbols... Completed at Default Offset (<1 sec) 
Specified not to Run 

* Reset and Download Completed * 


The OCD Console view shows the progress of the download operation. 


The Editor opens showing the Program Counter set at the beginning of the 
application code. 


| [al diabasm.s 52 \. (C) calendar.c WRProbe_PPC7S0FX =m) 
START: A) 
ENTRY: =) 
=_start: 
® addis rii,rO, _ SP_INIT@ha # Initial Stack Pointer 
addi ss r1,ri1,__SP_INIT@1 


addis r13,r0, SDA_BASE_Gha # Small Data Area 
addi r13,r13, SDA_BASE @1 


addis r2,r0, SDA2_BASE_fha # Small Data Area 2 
addi -r2,r2, SDA2 BASE @1 


addi r0,r0,0 # Push O onto stack 
stwu r0,-64(r1)j 

er 
bl main 

ae 

deadloop: 

h deadloop 

Pr 

-globl addone 

~addone: 
addi r3,r03,1 # increment parameter... 
belr 20,0 # go back 


# end PowerPC 


-endif ~ 
id a mm 


\w 
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You are now ready to run and debug the application. 


2.4 Debugging Code 


Use the Debug view to monitor, control, and manipulate the processes and tasks 
that you are actively debugging. The Debug view shows only the processes that 
are currently under debugger control. 


® Debug X 
o> NW PBReQRMER 


= $9 wrProbe_PPC7SOFx [Attach to Target] 


iwi PPC7SOFX (System Mode) 
=) ah System Context (Stopped) 
=" _start() - diabasm.s:44 


2.4.1 Monitoring Processes 
When you start processes under debugger control, or attach the debugger to 
running processes, they appear in the Debug view labeled with unique colors and 


numbers. You can change the color assigned to a process or thread by right-clicking 
the process or thread and selecting Color > specific color. 


2.4.2 Stepping Through Code 


The Editor shows the source file diabasm.s, showing the C Demonstration Project 
initialization assembly. 
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In the Debug view, click the Step Into button. 


The Program Counter moves to the second assembly instruction. If you open the 
Memoty view or the Registers view, you can see them update memory and 
register values as you step through instructions. 


Click the Step Into button seven more times, to step through all the initialization 
code and reach the first branch instruction: 


bl main 
This is where the application branches out of assembly into C code. 
Click the Step Into button again. 


The application branches into main() and the Editor opens the source file cdemo.c. 


\a) diabasm.s (@ cdemo.c X 


char *globalstring[3]; /* Uninitializeded array of string pointers */@ 


char bel1[2] = {BELL_CHAR, '\0'}; 


D/A AAAAA AAA AAA AAA AAA AA AAA AA AAA AAA AAA AAA TATA AAA AAA AAA AAA AAA AAA AA AAA AAA TATA 
int main() 
{ 
volatile long demo_counter; 
volatile int pfa_demo=0; 
int sum = 0; 
volatile char cvar; /* sample char variable */ 
REC_TYPE1 q;: 
volatile int localInti; 
volatile long localLongi; 


/* Setup the global string array */ 
globalstring[0] = "zero"; 
globalstring[1] "one"; 
globalstring[2] "two"; 


/* Initialize the rectest structure */ 

rectest.long integer = OxFFFFEEEE; 
rectest.short_integer = 5555; 
rectest.integer_array[0] = 0; 
rectest.integer_array[1] = 10; 
rectest.integer_array[2] 20; 

rectest.integer array[3] 30; 

rectest.string pointer = "Wind River's Tool Product 
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2.4.3 Setting a Software Breakpoint 


Breakpoints allow you to stop a running program at particular places in the code 
or when specific conditions exist. 


In the left ruler of the Editor (the gutter), double-click to the left of the source line 
globalstring[2] = “two”; 


This sets a software breakpoint on that source line. The breakpoint appears in the 
Breakpoints view. 


Project Na... Symbol Bro... | Watch Peeelsi-&|"etsiiese,¢ 


x eB 3% | 4 >| 


@ }{c_demo_sa/cdemo.c:113 (*Planted*, Restricted Scope) 


In the Debug view, click the Resume button. The program runs until it hits the 
breakpoint. The System Context changes to Stopped -- Breakpoint Hit. 


® Debug X 


o> aN RZ TPRMRR=Z 


i) &% WRProbe_PPC?S50Fx [Attach to Target] 
=)" PPC7S0FX (System Mode) 
5 a System Context (Stopped - Breakpoint Hit) 
| 


maint) - cdemo.c:113 
=" diabasm.s:58 


Breakpoint information also appears in the OCD Command Shell: 


>RUN> 
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!BREAK! - [msg12000] Software breakpoint; PC = 0x00014074 [EVENT Taken] 
>BKM> 


2.4.4 Running a Program 


To run your downloaded program, click Resume in the Debug view. The program 
will run until it hits a breakpoint. If there are no breakpoints or interrupts, the 
program will run to completion or until you click Suspend. 


When the program is running, the System Context changes to Running, and a 
>RUN> prompt appears in the OCD Command Shell. 


® Debug X 


O0 of 


=) & WRProbe_PPC?S0FX [Attach to Target] 
So al PPC?SOFX (System Mode} 


% System Context (Running) 


If there are no breakpoints, you can stop the program by clicking the Suspend 
button in the Debug view or by entering the HA command at the >RUN> prompt 
in the OCD Command Shell. 


The Editor updates to show the current location of the Program Counter and the 
System Context in the Debug view changes to Stopped -- User Request. 
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® Debug X 
Oo» $y? : : 
re) $%} WRProbe_PPC?S0FX [Attach to Target] 


iw? PPC7SOFX (System Mode) 
e) co System Context (Stopped - User Request) 
o 


= calendar(} - calendar.c:122 
=" maint) - cdemo.c:184 
=" diabasm.s:58 


2.4.5 Stepping Through a Program 


To single-step without going into other subroutines, click Step Over instead of 
Step Into. 


While stepping through a program, you may conclude that the problem you are 
interested in lies in the current subroutine’s caller, rather than at the stack level 
where your process is suspended. In this situation, if you click Step Return, 
execution continues until the current subroutine completes, then the debugger 
regains control in the calling statement. 


2.4.6 Setting a Hardware Breakpoint 


The availability of hardware breakpoints varies by architecture. You can only set 
as many hardware breakpoints as there are debug registers available on your 
target. 


Once a hardware breakpoint is trapped, the debugger will behave in the same way 
as for a standard breakpoint and stop for user interaction. 


In the Breakpoints view, click on the Menu button and select Add Data 
Breakpoint. 


The Data Breakpoint dialog appears. 
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% Data Breakpoint Properties 


Breakpoint Address and General Attributes tae tat 


© Please specify Address Expression 


Select debug target For target-specific information 
ee PPC7S5OF% 
None - preserve current settings 


“9 General Status Scope @ Hardware 


Address Expression | | 


[| Continue on Break 


Continue Delay (ms) | 


Cancel 


If an error message appears, you may have exceeded the number of allowed 
hardware breakpoints (four for most targets). Right-click in the Breakpoints view 
and select Remove All. Then select Menu > Add Data Breakpoint again. 


If an error message still appears, your target may not support hardware 
breakpoints. 


You can use data hardware breakpoints to find out which routines are modifying 
a specific variable. 


The Address Expression can be a symbol or a specific address in hex. You can use 
the address 0x0 in the Address Expression field to set a data hardware breakpoint 
to catch null pointers. You can set the Address Expression field to an address in 
the stack area to set a data hardware breakpoint to find out if the stack grew to that 
point. 


The following example sets a symbol in the Address Expression field. 


1. Click Browse. 
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The Select Symbol dialog appears, showing a list of available symbols that can 
take a hardware breakpoint. 


% Select a symbol 


Choose the symbol from the list. Debug symbols can only be 
retrieved if there is an active debug session 


Debug target 
| PPC7SORX 


Filter (reqular expression) 


Matching symbols 


i) send_month - globalfunction 
® SeniorTestEngineer - globalvariable 
status - globalvariable 

strcmp - globalfunction 

strcpy - globalfunction 
swapCells - globalfunction 
test_engineer - globalyariable 
testBits - globalvariable 
TestEngineer - globalvariable 
wait_count - globalyariable 
wait_index - globalvariable 
year1997 - globalvariable 


vv 


2. Scroll down and highlight the symbol wait_index. 
3. Click OK. 


The global variable wait_index is now the address for the data hardware 
breakpoint. 


The hardware breakpoint on wait_index appears in the Breakpoints view. 
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“s Breakpoints % 


MOM wait_index (*Planted*, Restricted Scope) 
yw 


In the Debug view, click Resume. 


The program runs until it hits the hardware breakpoint. Workbench halts the 
processor when it locates wait_index and displays that source line in the Editor. 


2.4.7 Disconnecting and Terminating Processes 


Disconnecting from a process or core detaches the debugger, but leaves the process 
or core in its current state. 
Terminating a process actually kills the process on the target. 


NOTE: If the selected target supports terminating individual threads, you can 
select a thread and terminate only that thread. 


2.5 Moving On 


For descriptions of other features of Wind River Workbench for On-Chip 
Debugging, such as code profiling, code tracing, and so on, see the relevant 
chapters in this document. 
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3.1 Introduction 
This chapter provides a tutorial on basic operation of Wind River Workbench for 
On-Chip Debugging (OCD). 


You can use Wind River Workbench to run and debug code either in combination 
with the Workbench project management utility, or without a project. This chapter 
assumes you are debugging without using a Workbench project. For a tutorial on 
debugging without a Workbench project, see 2. Basic Operation: Debugging with a 
Project. 


This tutorial includes the following topics: 
* Launching Wind River Workbench. 
«Connecting to a Wind River emulator and a target processor. 


« Downloading code to the target. 
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« Debugging code running on the target. 


3.2 Connecting to the Target 
First, open Workbench according to the method for your host computer. 


Linux/Solaris Hosts 
From your installation directory, issue the command 


S ./startWorkbench.sh 
Windows Hosts 


Select Start > All Programs > Wind River > Wind River Workbench version. 


On Windows hosts, Workbench prompts you to specify a workspace location. 
Linux and Solaris hosts use the default location installDir/workspace. 


The Welcome screen appears. 
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Welcome to Wind River Workbench 2.6 


WIND RIVER 


WWW.WINDRIVER.COM 


9+ 


= © 


{ry 
Workbench 


1. Click Workbench. 


Workbench opens, displaying the Quick Target Launch dialog. 
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Wind River On Chip Debugging 
@ Choose How You Want to Start 


Defined Launches 
Create a new launch configuration 
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Edit an existing launch configuration 


Connect, Attach, Reset and Download 


Sync with target and download symbols 


Do not show this dialog on startup 


Workbench saves all information regarding a particular emulator-target 
connection in a launch configuration. The launch configuration includes such 
configuration information as emulator type, target processor family, target 
CPU, and host-PC interface port, plus any port parameters such as IP address 
(if using a Wind River ICE SX), serial number (if using a Wind River Probe) or 
baudrate. 


Once you have defined an emulator-target connection, Workbench saves it in 
the workspace folder. The next time you open Workbench, that launch 
configuration will appear in the Defined Launches area of the Quick Target 
Launch dialog, and you can return to it by highlighting it and clicking 
Connect, Attach, Reset and Download. 


The Quick Target Launch dialog opens automatically any time you launch 
Workbench. If you do not want to use the Quick Target Launch, select the Do 
not show this dialog on startup checkbox and click Close. You can open the 
Quick Target launch dialog at any time by clicking the OCD Quick Launch 
button in the Workbench toolbar. 


Since this is the first time you have opened Workbench, there are no existing 
launch configurations, and you must create one. 


Select Create a new launch configuration. 


The Connection Type dialog appears. 


3 Basic Operation: Debugging Without a Project 
3.2 Connecting to the Target 


¥ New Connection 


Connection Type 


Please select connection type. 


Wind River OCD ICE Connection 

Wind River OCD 15S Connection 

Wind River VxWorks 6.x Core Dump Connection 
Wind River ¥xWorks 6.x Simulator Connection 
Wind River ¥xWorks 6.x Target Server Connection 


Cancel 


Select your connection type (Wind River ICE SX, Wind River Probe, or Wind 
River Instruction Set Simulator) and click Next. 


For instance, the examples in this tutorial show a Wind River Probe emulator 


connected to a Wind River PPMC750FX target, so you would select Wind 
River OCD Probe connection. 


The Processor Selection dialog appears. 
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W) New Connection 


Wind River Probe Settings 


Configure the designator settings for the emulator. 


Designators 


@)Processor: | PPC7SOFX 


© Board file: 


Processor Plugin 


¥  Designator 


Processor 


VM) PPC?SOFX PPC?SOFX PowerPC 7xx Family Process... | 


Auto-attach to connected designators 


Communications 
USB Device Name; | PRO40310 


4. Click Select. From the list that appears, expand MPC7xx and select PPC750FX. 
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% Processor Selection 


Current Connection - Wind River Probe : PPC750F 


|  MPCOxx 

|) MPC? 4xx 

(=) MPC? xx 
MPC740 
MPC745 
MPC750 
MPC755 
PPC740 
PPC745 
PPC7S0 
PPC7S0CX 
PPC7SOCKE 
PPC7SOCKR 


PPC7S0GX 
PPCFsnl 


NS 


Make sure the Auto-attach to connected designators checkbox is selected and 
click OK. 


You are returned to the Processor Selection dialog. 
Click Next. 
The Target Operating System Settings dialog appears. 
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% New Connection 


Target Operating System Settings 


Select the target operating system which is currently booted on the 
configured target. 


Available CPU{s) on target board: 


Target operating system settings 
Booted Target OS on selected CPU: | None 


Description: 
Providing plugin: 


Kernel image: | Browse... 


Kernel image is optional for None 


Target 05 plugin pass-through options: 


7. Inthe Booted Target OS on selected CPU field, select the operating system 
that is running on your target processor. The default is None. 


8. Next to the Kernel Image field, click Browse to navigate to the kernel image 
you wish to specify. If you selected None in the previous step, you do not need 
to specify a kernel image. 


9. Ifyou are using a Linux plug-in, specify the pass-through options in the Target 
OS Pass-Through Options field. If you are not using a Linux plug-in, skip this 
step. 


Options are passed as pairs in the format name="value’. Separate options with 
a comma. The following options are available: 


* notasklist=1 : Never fetch process list. 


*"  noautomodules=1 : Do not plant internal breakpoints to do automatic 
kernel module load/unload detection. When this option is specified, you 
must manually refresh to see an updated module list. 
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* noloadcheck=1 : Do not issue gophers until the hardware breakpoint is 
used to detect kernel load triggers. This option is for “sensitive” boards 
that don’t accept access until the kernel loads and sets up memory 


mapping. 


* loaddetectloc=symbol or address: Set the hardware breakpoint used to 
detect kernel load at symbol (for example, loaddetectloc=start_kernel) or 
address (for example, loaddetectloc=0x1000). If you do not specify a 
symbol or address, Workbench uses a default. For most architectures the 
default is start_kernel; for PowerPC targets, the default is 0x0. 


10. Click Next. 
The Memory Options dialog appears. 


4 New Connection 


Memory Options 


Specify the memory options for the target cpu. 


Available CPU(s) on target board: 


Memory mapping 


Offset Attributes 


Undefined memory areas accessible 


Cancel 


Use the Memory Options dialog to specify how memory on the target is 
partitioned, and what the attributes of the particular memory regions are. 


NOTE: The Memory Options dialog is only necessary for Linux or other 
non-VxWorks target operating systems. 
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To specify an area of memory, click Add. 


The Set Memory Map dialog appears. 


% Memory mapping 


Please specify the offset, size and attributes for the memory mapping. 


Offset: _Sxoa000000 
Size: 600000000 


Attributes 


[J Invalid 


__|Read 
Access size (bit): 


Default access size (bit): 


[| Write 
Access size (bit): 


Default access size (bit): 


(JRead/Write 
Access size (bit): 


Default access size (bit): 


Use the Set Memory Map dialog to specify which memory areas are read-only, 


read-write, or write-only, and to specify the access width Workbench should 
use to read the data from those regions. 


11. Click Next. 


The Object Path Mappings dialog appears. 
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W New Connection 


Object Path Mappings 


Specify how files in the target file system are visible in the host file system. 


Available CPU{s) on target board: 


Load module symbols to debug server automatically iF possible 


Pathname prefix mappings: 


¥ Target Path Host Path 


<leave path unchanged> 


»| (eam. 


Basename mappings: 
[*;*.unstripped],[*;*] 


| 


Use the Object Path Mappings dialog to specify how files in the target file 
system are visible in the host file system. 


12. ‘To adda host or target path, click Add... and type the path in the dialog that 
appears. 


13. Click Next. 
The Target State Refresh dialog appears. 
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W New Connection 


Target State Refresh 


Configure the core{s) target states refresh settings. 


Available CPU(s) on target board: [Pceseo 


Initial target state query settings 
[_] Query target object lists and target object states on connect 


|] Query target object state(s) on stopped events 


Query target object state(s) on running events (receiving object only) 


Target state refresh settings 
@Refresh the target state manually only 


O Auto-refresh the target state periodically 


(listen to execution context life-cycle events (context-start, context-exit) 
It is not known if life-cycle events for execution contexts are provided, 


Use the Target State Refresh dialog to configure the target state query and 
target state refresh settings on your target processor. 


14. Click Next. 
The Default Breakpoint Options dialog appears. 
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W, New Connection 


Default Breakpoint Options EZ 
3 


Select the default breakpoint options for newly created breakpoints. 


Available CPL(s) on target board: 


Default Breakpoint Stop Scope 
O Stop all 
©) Stop triggering thread 


(tek Cees) res | Cee) 


Use this dialog to set default breakpoint options for newly created 
breakpoints. 


15. Click Next. 


The Connection Summary dialog appears. Inspect the displayed values to 
make sure they are correct. 
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® New Connection 


Connection Summary 


Please review the connection information 


Connection name: | WRProbe_PPC7S0FX_0 : 


Summary 


Property Value 
ADDR PRO40310 
AutoAttachConnectedCon true 

| DESIGNATORMAP 

DEVICE Wind River Probe 
NAME_MAPPING [*;*.unstripped],[*;*] 
PATH_MAPPING Gd 
STYLE USBDEVICE 


Immediately connect to target if possible 


Ce) 


16. Make sure that the Immediately connect to target if possible checkbox is 
selected and click Finish. 


Workbench creates a target connection called WRProbe_PPC750FX in the 
Target Manager view. 


The Reset and Download view appears. 


3.3 Downloading Code 


Use the steps in this section to download symbols and code to your target. 


1. Inthe Reset and Download view, select the Reset tab. 
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Name: | pWRProbe_PPC7SOFX - PPC7SOF® 


> Main @ Download = Instruction Pointer @#* Run Options ** Projects to Build Ey Source [] Common 
PPC7SOFX 
[VJPlay register file C:\windRiver\workbench-2,6\dFw\0160g\host\registers\PowerPC\7xx\windRiver_PPMC\ppmec?50Fx.reg v 
¥| Reset in - Reset/setup regs yi} Query Target 
© Specified core 
Odall cores 


Cores tied on reset: 


2. Ifyou want to configure the target register values with a register file, select 
Play Register File and browse for the file you want to use. 


Register files for many Wind River-supported targets are located in 
installDirlworkbench-2.x/dfw/build/host/registers. 


If you do not want to reconfigure your target registers, leave this box 
unchecked. 


3. Choose the type of reset initialization you want to perform. 


You can use the IN or INN initialization commands. For a full discussion of 
these two commands, see the Wind River Workbench for On-Chip Debugging 
Command Reference. 


You can also choose not to perform an initialization by clearing the Reset box. 


CAUTION: If you are manually changing registers on your target, be aware that 
issuing an IN or INN initialization command will overwrite your changes. 


4. Select the Download tab. 


Name: | WRProbe_PPC750FX - PPC7SOFX 


Main Reset Instruction Pointer Run Options ** Projects to Build Ey Source ©) Common. 
Ras a 


yoo 
PPC?SOFX 
File Download Verify Load Symbols Offset 
cdemo.elf - C:/WindRiver/standalone-1.0/samples/c_demd_... None ¥ 
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6. 


Click Add Files. 


In the browser window that appears, navigate to the executable file you want 
to run. 


The file you select appears in the Filename field. Repeat this process as many 
times as necessary. 


The file at the top of the list will download to the target first, followed by the 
others from the top down. You can edit the order of the list by clicking on any 
filename to highlight it and using the Up, Down, and Delete buttons. 


Use the other fields to configure the download. 


Download 


The Download field is checked by default. If you clear it, the file will remain 
on the list but will not download data to the target. This is useful if, for 
example, you only want to download symbol information and not data. 


Verify 
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The Verify field configures the extent to which the file you are downloading 
will be compared to a file that may already be on the target. There are three 
options: Full, Compare, and None. 


When this field is set to Full, a write/read verify will occur for every 
download. Workbench writes to the target and then verifies that the write to 
the target and the read from the target are identical. This is slower than a 
normal download, but it is a useful security option. 


When the field is set to Compare, Workbench will verify that the image has 
been downloaded correctly (that is, that the image on the host is the same as 
the image on the target.) This is useful for programming flash. 


NOTE: You should only set the Verify field to Compare if an image already 
exists on the target. If you set the field to Compare when there is no image on 
the target, Workbench will look for a file to compare and not find one, and the 
reset and download operation will fail. 


When the field is set to None, Workbench will perform no verification. 


The Verify field is set to None by default. 


3 Basic Operation: Debugging Without a Project 
3.3 Downloading Code 


Load Symbols 


The Load Symbols field, which is checked by default, determines whether the 
file’s symbol information is downloaded to the target. 


Offset 
In the Offset field, you can enter a value in hex to set a memory offset bias for 


your application file. If you do not enter a value, Workbench uses the default 
value 0x00000000. 


7. Select the Instruction Pointer tab. 


Name: WRProbe_PPC750FX - PPC7SOF% 


@ Main @ Reset # Download eerie @ Run Options ** Projects to Build Ey Source [] Common 
PPC?SOFX 


| Set instruction pointer after download 


@Use start address from download file 
Ouse start address From symbol 


Ose specified start address D] 


8. Set the starting point for your file. 


By default, the instruction pointer is set to use the starting address from the 
download file. 


You can set the instruction pointer to start the file from the first occurrence of 
a particular symbol (for example, main) or you can just specify a starting 


address by entering the address value in hex in the Use Specified Start 
Address field. 


If you do not want to set a starting point, clear the Set Instruction Pointer 
After Download box. 


Select the Run Options tab. 
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Name: | WRProbe_PPC7SOFX - PPC?SOFX 


@ Main @ Reset # Download @ Instruction Pointer [Run Options had Projects to Build Ey Source [) Common 
PPC7SOFX 


®Do not run 

OvRun to symbol iain] 
ORun to address | 
O)Run to end of program 

/ | Break at Exit 


-]Play post download script 


10. Determine how you want your file to run. 


By default, the Reset and Download view is set not to run the file after 
downloading. If you want the file to run, you have several options to 
determine where it should break: 


* You can set it to break at the first occurrence of a symbol (for example, 


main) by selecting Run to Symbol and entering the symbol in that field. 


You can set it to break at the end of your program by selecting Run to end 
of program. 


You can set it to break at a given memory address by selecting the Run to 
Address box and entering the address in hex in that field. 


* You can set it to break at an _exit routine by selecting the Break at Exit box. 


If you need to perform a post-initialization, you can define it here. Select the 
Play post download script box and click Browse. In the browser window that 
appears, navigate to your initialization file. 


11. Select the Source tab. 


Name: [ WRProbe_PPC7SOFX - PPC7SOFX 


@ Main @ Reset @ Download @ Instruction Pointer # Run Options ** Projects to Build T 7 Source West Common 
Source Lookup Path: 


cam 


12. Use the Source tab to configure the source path of your file. 
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3 Basic Operation: Debugging Without a Project 
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Workbench uses the input path of the local file system by default. Unless you 
need to use a different path, you do not need to do anything in the Source tab. 


If you need to use a different path, click Add... and use the Add Source dialog 
to configure the appropriate search path for your project. 


Select the Common tab. 


@ Main @ Reset @ Download | @ Instruction Pointer | @# Run Options ** Projects to Build ' Source | = Common “a 


Save as 
® Local file 


O Shared file: 


Standard Input and Output 


cd) 


Allocate Console (necessary for input) 
File: 


14. Specify whether your launch configuration is local or shared. 


15. 


The configuration is local by default. To make it shared, click Shared file: and 
browse to the shared directory where you want the configuration to be located. 


You have now fully defined your reset and download operation. 
Click Debug. 


Workbench initializes the target board, then downloads the file, then runs the 
file. 


The OCD Console view opens to show the progress of the reset and download 
operation. 
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Tasks Problems Properties Build Console Error Log TerminalO Trace OCD Command Shell OCD Console 


Reset and Download 


Testing Communications to Hardware Interface.... Passed 
Driving HRESET to be High Passed 
Driving HRESET to be Low Passed 
Waiting HRESET Low Acknowledge. nese Passed 
Attempting JTAG communication...... jabee Passed 
Waiting for HReset to be released. Passed 
Testing for target STOP State......... Passed 
Comparing target CPU with CF setting.. . Passed 
Waiting for HRESET High Acknowledge. an Passed 
Testing JTAG Communication ‘ Passed 
Loading Internal Registers. . a Passed 
Testing JTAG Communication.. ‘a Passed 
Getting value of cf mmu option .. Passed 
Attempting to restore CPU context... eveeeee Passed 
C:\WindRiver\workspace\c_demo_sa\PPC603diab_DEBUG\cdemo.elF 
Loading symbols... Completed at Default Offset (<1 sec) 
Specified not to Run 

* Reset and Download Completed * 


< | 


The Editor opens showing the Program Counter set at the beginning of the 
application code. 
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la) diabasm.s 23 C) calendar.c ==" WRProbe_PPC7S0FX an) 
START: “a 
ENTRY: = 
_start: 
> addis rii,rO,_ SP_INIT@ha # Initial Stack Pointer 
addi ri,ri1,__SP_INIT@1 


addis r13,r0, SDA_BASE @ha # Small Data Area 
addi r13,r13, SDA_BASE @1 


addis r2,r0,_SDA2_BASE_@ha # Small Data Area 2 


addi r2,r2,_SDA2_ BASE @1 
addi r0,r0,0 # Push O onto stack 
stwu r0,-64(r1) 

e+ 
bl main 

e* 

deadloop: 

h deadloop 

@ +7] 


-globl addone 


~addone: 
addi r3,r3,1 # increment parameter... 
belr 20,0 # go back 


# end PowerPC 
-endif 


lw 
\k< 


You are now ready to run and debug the application. 


3.4 Debugging Code 


Use the Debug view to monitor, control, and manipulate the processes and tasks 
that you are actively debugging. The Debug view shows only the processes that 
are currently under debugger control. 


53 


Wind River Workbench for On-Chip Debugging 
User Tutorials, 2.6.1 


® Debug * 


o> NW PBReQRMESR 


=) &% WRProbe_PPC?SOFX [Attach to Target] 
a PPC?SOFX (System Mode) 
=) co System Context (Stopped) 
=" _start() - diabasm.s:44 


3.4.1 Monitoring Processes 


When you start processes under debugger control, or attach the debugger to 
running processes, they appear in the Debug view labeled with unique colors and 
numbers. You can change the color assigned to a process or thread by right-clicking 
the process or thread and selecting Color > specific color. 


3.4.2 Stepping Through Code 
The Editor shows the source file diabasm.s, showing the C Demonstration Project 
initialization assembly. 
In the Debug view, click the Step Into button. 


The Program Counter moves to the second assembly instruction. If you open the 
Memoty view or the Registers view, you can see them update memory and 
register values as you step through instructions. 


Click the Step Into button seven more times, to step through all the initialization 
code and reach the first branch instruction: 


bl main 


This is where the application branches out of assembly into C code. 


Click the Step Into button again. 
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The application branches into main() and the Editor opens the source file cdemo.c. 


\a) diabasm.s £5" WRProbe_PPC7SOFX (@ cdemo.c X =. 


char *globalstring[3]; /* Uninitializeded array of string pointers */@ 


char bell[2] = {BELL CHAR, '\0'}; 


es eee ee ee ee ee ee ee ee ee ee ee ee ee ee ee ee ee ee 
int main{) 
{ 
volatile long demo_counter; 
volatile int pfa_demo=0; 
int sum = 0; 
volatile char cvar; /* sample char variable */ 
REC_TYPE1 q? 
volatile int localInti; 
volatile long localLongi; 


/* Setup the global string array */ 
globalstring[0] = "zero"; 
globalstring[1] = "one"; 
globalstring[2] = "two"; 


/* Initialize the rectest structure */ 

rectest.long_ integer = OxFFFFEEEE; 

rectest.short_integer = 5555; 

rectest.integer_array[0] = 0; 

rectest.integer_array[1] = 10; 

rectest.integer_array[2] 20; 

rectest.integer_array[3] 30; 

rectest.string pointer = "Wind River's Tool Product Family"; 


3.4.3 Setting a Software Breakpoint 
Breakpoints allow you to stop a running program at particular places in the code 
or when specific conditions exist. 
In the left ruler of the Editor (the gutter), double-click to the left of the source line 
globalstring[2] = “two”; 


This sets a software breakpoint on that source line. The breakpoint appears in the 
Breakpoints view. 
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Project Na... | Symbol Bro... Watch (eesti \"ar ines ed 


Rew wo HES| 2° 
@ }{c_demo_sa/cdemo.c:113 (*Planted*, Restricted Scope) 


In the Debug view, click the Resume button. The program runs until it hits the 
breakpoint. The System Context changes to Stopped -- Breakpoint Hit. 


® Debug X 


o> aN x RARBWRLKLKQR=Ez 


cS) &%} WRProbe_PPC7S50Fx [Attach to Target] 
=)” PPC7SOFX (System Mode) 
re a System Context (Stopped - Breakpoint Hit) 
—_O 


main() - cdemo,.c:113 
=" diabasm.s:58 


Breakpoint information also appears in the OCD Command Shell: 


>RUN> 


!BREAK! - [msg12000] Software breakpoint; PC = 0x00014074 [EVENT Taken] 
>BKM> 


3.4.4 Running a Program 
To run your downloaded program, click Resume in the Debug view. The program 


will run until it hits a breakpoint. If there are no breakpoints or interrupts, the 
program will run to completion or until you click Suspend. 
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When the program is running, the System Context changes to Running, and a 
>RUN> prompt appears in the OCD Command Shell. 


® Debug X 


00 Mo! & 
=) &% WRProbe_PPC7S0Fx [Attach to Target] 
me ad PPC7SOPX (System Mode) 
System Context (Running) 


If there are no breakpoints, you can stop the program by clicking the Suspend 
button in the Debug view or by entering the HA command at the >RUN> prompt 
in the OCD Command Shell. 


The Editor updates to show the current location of the Program Counter and the 
System Context in the Debug view changes to Stopped -- User Request. 


® Debug X 


Oe bf? 28 8% = 
5 7) WRProbe_PPC?7S0FX [Attach to Target] 
=)-9@? PPC7S0FX (System Mode) 
ce) a System Context (Stopped - User Request) 


— dayOFYear() - calendar.c:213 


= calendar(} - calendar.c:122 
=" maint) - cdemo.c:184 
=" diabasm.s:58 


3.4.5 Stepping Through a Program 


To single-step without going into other subroutines, click Step Over instead of 
Step Into. 


While stepping through a program, you may conclude that the problem you are 
interested in lies in the current subroutine’s caller, rather than at the stack level 
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where your process is suspended. In this situation, if you click Step Return, 
execution continues until the current subroutine completes, then the debugger 
regains control in the calling statement. 


3.4.6 Setting a Hardware Breakpoint 


The availability of hardware breakpoints varies by architecture. You can only set 
as many hardware breakpoints as there are debug registers available on your 
target. 


Once a hardware breakpoint is trapped, the debugger will behave in the same way 
as for a standard breakpoint and stop for user interaction. 


In the Breakpoints view, click on the Menu button and select Add Data 
Breakpoint. 


The Data Breakpoint dialog appears. 


% Data Breakpoint Properties 
Breakpoint Address and General Attributes 


© Please specify Address Expression 


Select debug target for target-specific information 
@ PPC75OFX 
None - preserve current settings 


“9 General Status Scope @ Hardware 


Address Expression | | 


[| Continue on Break 


Continue Delay (ms) | 


Cancel 
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If an error message appears, you may have exceeded the number of allowed 
hardware breakpoints (four for most targets). Right-click in the Breakpoints view 
and select Remove All. Then select Menu > Add Data Breakpoint again. 


If an error message still appears, your target may not support hardware 
breakpoints. 


You can use data hardware breakpoints to find out which routines are modifying 
a specific variable. 


The Address Expression can be a symbol or a specific address in hex. You can use 
the address 0x0 in the Address Expression field to set a data hardware breakpoint 
to catch null pointers. You can set the Address Expression field to an address in 
the stack area to set a data hardware breakpoint to find out if the stack grew to that 
point. 


The following example sets a symbol in the Address Expression field. 
1. Click Browse. 


The Select Symbol dialog appears, showing a list of available symbols that can 
take a hardware breakpoint. 
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“) Select a symbol 


Choose the symbol From the list. Debug symbols can only be 
retrieved if there is an active debug session 


Debug target 
@@ PPC7SOFX 


Filter (reqular expression) 


Matching symbols 


® =send_month - globalfunction 
® SeniorTestEngineer - globalvariable 
status - globalvariable 

strcmp - globalfunction 

strcpy - globalfunction 
swapcCells - globalfunction 
test_engineer - globalyariable 
testBits - globalvariable 
TestEngineer - globalvariable 
wait_count - globalyariable 
wait_index - globalyariable 
year1997 - globalvariable 


vv 


2. Scroll down and highlight the symbol wait_index. 
3. Click OK. 


The global variable wait_index is now the address for the data hardware 
breakpoint. 


The hardware breakpoint on wait_index appears in the Breakpoints view. 
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“= Breakpoints 


3 
RW wait_index (*Planted*, Restricted Scope) Ei 
y 


In the Debug view, click Resume. 


The program runs until it hits the hardware breakpoint. Workbench halts the 
processor when it locates wait_index and displays that source line in the Editor. 


3.4.7 Disconnecting and Terminating Processes 


Disconnecting from a process or core detaches the debugger, but leaves the process 
or core in its current state. 
Terminating a process actually kills the process on the target. 


NOTE: If the selected target supports terminating individual threads, you can 
select a thread and terminate only that thread. 


3.5 Moving On 


For descriptions of other features of Wind River Workbench for On-Chip 
Debugging, such as code profiling, code tracing, and so on, see the relevant 
chapters in this document. 
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Introduction 63 

Creating an OCD Standalone Project 64 
Building an OCD Standalone Project 71 
Setting Standalone Project Defaults 72 


4.1 Introduction 


Every Workbench project has a set of build specs from which you can select, 

depending on your target processor. For example, there may be a build spec for a 
PowerPC 603 target and a different build spec for an ARM 920T target, as well as 
many other variations. 


For operating system-independent (standalone) applications, rather than simply 
providing all possible variations, Workbench provides a Standalone Project 


Wizard, from which you can create a build spec dynamically. 


Standalone application projects can only be debugged using OCD functionality. 
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4.2 Creating an OCD Standalone Project 


To create a standalone project: 
1. In Workbench, select File > New > Standalone Application Project. 


The Standalone Project wizard appears, as shown in Figure 4-1. 


Figure 4-1 Standalone Wizard -- Project Name 


% New Standalone Application Project 


Project 
Create a new standalone application project from a selected / ] 
execution environment, 


Project name: | Test_OCD_Project| 


Location 
® Create project in workspace 


© Create project at external location 


2. Inthe Project Name field, assign a name to your project. In the example shown 
in Figure 4-1, the project name is Test_OCD_Project. 


3. Click Next. 
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Figure 4-2. Standalone Wizard -- Build Defaults 


W New Standalone Application Project 


Build Setup and Defaults EE 
4 


Choose the managed build type and specify the build defaults 
source. 


Managed build type 
©) Standard 
OFlexible 


Note: Use Standard managed build if your build structure is similar to 
the filesystem structure, Select Flexible managed build if your 
build targets contain files From any project in your workspace. 


Build defaults source 


vorkspace defaults 


4. Specify the build defaults for your project. 
If your build structure is similar to the filesystem structure, select Standard. 


If your build targets contain files from any project in your workspace, select 
Flexible. 


5. Click Next. 
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Figure 4-3. Standalone Wizard -- Build Support 


%%) New Standalone Application Project 


Build Support 
Choose the build support and specify the build command. 


Build command: | make --no-print-directory 


Make Rules For User-defined build 


Build output passing 
[_]Pass received and current objects to next level 
[_]Pass received build targets to next level 


Note: If no build targets are defined at the current level and the "Pass 
received and current objects to next level" option is disabled, no 
objects will be built at the current level, 


Build path 


Redirection root directory: 


Note: Leave this field blank to store build output together with the sources, 
or enter an absolute path (environment variables are permissible) to 
redirect the output. 


6. Specify the build support for your project. 
You can also use this step to determine how build output is passed. 


7. Click Next. 


The Build Spec wizard appears, as shown in Figure 4-4. 


66 


4 Using the OCD Standalone Project Wizard 
4.2 Creating an OCD Standalone Project 


Figure 4-4 Build Spec Wizard 


% New Standalone Application Project 


Execution Environment 


Select an execution environment to create a new build spec. 


Available execution environments: 


ARM 

ColdFire 

MIPS 

MIPS-IV¥ 

Pentium 

PowerPC 

PowerPC Compressed 
SH 

SPARC 


sae. sae 3 


+) 


+ 
+ 
cs 
Cr) 
Ce) 


Cancel 


Use the Build Spec wizard to create a set of build tool commands for a specific 
target environment. You will need to create a build spec for each target you 
want to build for. 


To complete the wizard you must fully expand at least one node of the tree and 
select an innermost node, as shown in Figure 4-5. 
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Figure 4-5 Build Spec Wizard -- Innermost Node 


W, New Standalone Application Project 


Execution Environment 
Resulting build spec: X86LHsimplediab 


Available execution environments: 


4 ARM 

) ColdFire 

4H MIPS 

+) MIPS-I¥ 

=) Pentium 

(X86 
=) X86 Elf little-endian Object Format 
Hardware Floating Point 
cross - Use Ram Disk For I/O 
simple - Only character I/O 
vxworks60 - InterFace with ¥xWorks 6,0 
vxworks61 - InterFace with ¥xWorks 6,1 
vxworks62 - Interface with ¥xWorks 6,2 
vxworks63 - Interface with ¥xWorks 6,3 
rtp) —-- Real Time Process for ¥x'Works 6.x 
(4) No Floating Point 

+) PowerPC 

4) PowerPC Compressed 

+) SH 

SPARC 


8. Click Next. 
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Figure 4-6 Standalone Wizard -- Build Target 
%) New Standalone Application Project 


Build Target 
Specify a build target. 


Build target name: | Test_OCD_Project 


Build tool: y| 


Build output passing 


Specify the build tool for your project. 


The Build Tool: field has five options: Linker, C-Linker, C++Linker, 
Librarian, or (User-Defined). You can switch the build tool to build static 


libraries with this project type, or to use the C or C++ compiler for linking. 


If the project is created as a root project, the default is Linker. 


If the project is created as a subproject, the default is Librarian. 


NOTE: If you selected an existing project before starting the wizard, you may 


select a superproject for the new project. 


9. Click Next. 
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Figure 4-7 Standalone Wizard -- Static Analysis 


% New Standalone Application Project 


Static Analysis 


Configure the process of analyzing your source code, 


Basic Configuration 
Enable Static Analysis 


Generate cross reference information 


Ca] 


Configure the process of analyzing your source code. 


By default, the wizard is set to enable static analysis and to generate 
cross-reference information. To disable either of these options, clear the 
checkbox in the wizard. 


10. Click Finish. 


Your project appears in the Project Navigator view, as shown in Figure 4-8. 
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4.3 Building an OCD Standalone Project 


Figure 4-8 Test Project 


= 


@ Project Navigator * 


User Build Arguments: 


If) Test_OCD_Project.elf (X86LHsimplediab_DEBUC 
(28 x86LHsimplediab_DEBUG 

>) .project 

swrmakefile 

wrproject 

Makefile 


To build your project, right-click on the test name in the Project Navigator view 
and select Build Project. Build output is displayed in the Build Console view, as 


shown in Figure 4-9. 


Figure 4-9 Build Console View 


le Retriever Terminal 0 


Build Started in Project ‘Test_OCD_Project': 2006-04-24 14:15:34 
Platform: Wind River Standalone (No Operating System) Platform 1.0 
Command: make - rint-directory BUILD_SPEC=X86LHsimplediab DEBUG_MODE=1 TRACE=1 


Working Directory: C:/WindRiver/workspace/Test_OCD_Project 


echo "building X86LHsimplediab_DEBUG/Test_OCD_Project.elf";if ["1" = "1" ]; then MAP_OPTION=-Wi,-m6;MAP_NAME="-WI,-@ 
ILE_OPTION="-Wm'";fi; dplus -tX86LH:simple -o "X86LHsimplediab_DEBUG/Test_OCD_Project.elf" -Ic -Istl-ld  $LINK_FILE_OP” 


_DEBUG/Test_OCD_Project.elF";fi 

building X86LHsimplediab_DEBUG/Test_OCD_Project.elf 

make: built targets of C:/'WindRiver/workspace/Test_OCD_Project 

Build Finished in Project ‘Test_OCD_Project’: 2006-04-24 14:15:35 (Elapsed Time: 00:01) 


You can now run and debug your standalone project. 
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4.4 Setting Standalone Project Defaults 


You can set workspace build defaults in Workbench and specify default build 
specs for all new standalone projects. 


NOTE: Setting new standalone defaults will not affect already-existing standalone 
projects. 


To set standalone project defaults: 
1. In Workbench, select Window > Preferences. 


The Preferences dialog appears, as shown in Figure 4-10. 


Figure 4-10 Preferences Dialog 


~W) Preferences 


‘type filter text | General 


E 
Build Console 
Build Extensions 
Build Properties 
} Help Open mode 
| Install{Update @ Double click 
OCD Command Shell O Single click 
# Run/Debug 
# ScopeTools 
4 Static Analysis 
System Viewer 
| Target Manager 
) Team 
Terminal 


(J Always run in background 
[_]Keep next/previous part dialog open 


Note: This preference may not take effect on all views 


Restore Defaults Apply 


2. Select Build Properties. 
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Figure 4-11 Build Properties 


W) Preferences 


type filter text | Build Properties 


General 
Build Console z : ; 
Build Extensions Specify default Build Properties For new: 
Build Properties Embedded Linux Application Project (General Linux Kernel 2.x) 

+) Help 


Install/Update 
OCD Command Shell Note: The build properties For all Wind River Linux project types are provided by the platform during project 
4) Run/Debug creation. Build property preferences are therefore not available for this platform. 


Note: These settings are the defaults for creating new projects. They have no effect on existing projects. 


|. ScopeTools Build Support | Build Specs | Build Tools | Build Macros | Build Paths 
+) Static Analysis 


i Build support 
System Viewer 
Target Manager @Managed build (makefiles generated by the IDE) 


Team OvUser-defined build (based on existing makefiles) 
Terminal O Disabled 


Build command: | make --no-print-directory 


Make Rules for User-defined build 


Build output passing 
@ (JPass received and current objects to next level 


@ (Pass received build targets to next level 


Note: If no build targets are defined at the current level and the "Pass received and current objects 
to next level" option is disabled, no objects will be built at the current level. 


Restore Defaults Apply 


3. Inthe Specify Default Build Properties for New: field, select Standalone 
Application Project (Wind River Standalone (No Operating System) 
Platform 1.0). 


4. Select the Build Support tab. 


5. Use the settings in the Build Support tab to configure the build support for 
standalone projects and click Apply. 


6. Repeat this procedure for the Build Specs, Build Tools, Build Macros, and 
Build Paths tabs. 


7. Click OK. 
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Any new standalone projects you create will now use the settings you specified in 
the Preferences dialog as defaults. 
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5.1 Introduction 


Use the Launch Configuration dialog to edit your defined emulator-target 
connections and their associated actions, such as initializing your target board and 
downloading a file to run on your target. 


The Launch Configuration dialog is very similar to the Reset and Download 
view, which is described in the Establishing Communications chapter of your 
emulator’s Hardware Reference. The difference is that the Launch Configuration, 
once defined, is persistent, and you can launch it at any time with one click without 
having to re-enter your values. 


The values you enter in the Reset and Download view are not persistent to the 
Launch Configuration you defined for your emulator and target, so using the 
Reset and Download view will not affect your Launch Configuration. 


In the Workbench toolbar, select Run > Debug. 
The Launch Configuration dialog appears. 
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Create, manage, and run configurations 


bi =P ae 


Configure launch settings From this dialog: 
_ type filter text 


| % - Press the 'New' button to create a configuration of the selected type. 
489 attach to Target 


| - Press the 'Duplicate' button to copy the selected configuration. 
@@ Batch Launch = a tt a 
© Java Applet 


36 - Press the ‘Delete’ button to remove the selected configuration. 
[ Java Application 


+ pa S hae 

Ju Whit _=© - Press the ‘Filter’ button to configure filtering options. 
& Kernel Task - Edit or view an existing configuration by selecting it, 
“ Launch Control 


(1 @ OCD Reset and Download 
& Process on Target 
eal Remote Java Application 
& Remote Java Launch and Con 
& RTP on Target 


Configure launch perspective settings from the Perspectives preference page, 


Close 


You can use the Launch Configuration dialog to create anew launch configuration 
or to edit, delete, or duplicate an existing launch configuration. 


5.2 Creating a Launch Configuration 


To create anew OCD launch configuration, use the following steps. 


1. Highlight the configuration type OCD Reset and Download and click the 
New button. 


The Main tab appears. 
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Name: | New _configuration 


[. Main “Weg Reset @ Download @# Instruction Pointer @# Run Options | ** Projects to Build &y Source [=] Common 


Connection 


Create a New Target Connection 


Connection to use: vRProbe_PPC7SOFX (localhost) ¥)| (Hide unconnected 


Core: 


2. Assign a name to the launch configuration. 


By default, the Name field will populate with the name of the most recently 
used target connection. If you want to use a different name, select the Name 
field and enter a name. 


The connection registry is set to localhost by default. 
3. Connect to an emulator and target. 
To connect using the default target connection, click Connect. 


If you want to create a new target connection, click Create a New Target 
Connection to open the New Connection wizard. Create a target connection 
following the procedure described in 2.2 Connecting to the Target, p.6. 


If you decide you want to change your emulator settings, you can return to the 
Settings dialog box by clicking Properties. 


Your emulator is now connected to the host computer and your target. 
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5.2.1 Specifying Files 
To download and run a file on your target, use the other tabs on the Launch 
Configuration dialog. 


1. Select the Projects to Build tab. 


@ main | © Projects to Build | # Reset | @# Download | @ Instruction Pointer | # Run Options | '% Source | =) Common 


Projects will be built before this Launch in the order given below, 
when "Build before Launch" is enabled in the Preferences, 


Projects to Build: 


c_demo_sa 


By default, the project you specify will build before the configuration is 
launched. If you do not want the project to build first, select 

Window > Preferences > Launching and clear the Build (if required) before 
launching check box. 


2. To specify a project to build, click Add Project... and select the project name 
from the list of available projects in the dialog that appears. 


You can add more than one project. Edit your project list with the Up, Down, 
and Remove buttons. 


3. Select the Reset tab. 
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@ main | &* Projects to Build | Reset ® Download | @# Instruction Pointer | # Run Options | §y Source | =) Common 
PPC?SOFX 


[¥] Play register file C:\WindRiver|workbench-2.5\dFw0141 thosttregisters\PowerPC\7xx\WindRiver_PPMC\ppmc’ v 


Reset IN - Reset/setup regs ™| 

© Specified core 
Oallcores 

Cores tied on reset: 

| PPC?SOFX 


4. Ifyou want to play a register file, select Play Register File and browse for the 
register file you want to use. 


This example shows a Wind River PPMC750FX target; the Wind River register 
file for this target is ppmc750fx.reg, located in 
installDirlworkbench-2.x/dfw/build/host/registers in the directory 
PowerPC/7xx/WindRiver_PPMC. 


If you do not want to reconfigure your target registers, leave this box 
unchecked. 


5. Choose the type of reset initialization you want to perform. 


You can use the IN or INN initialization commands. For a full discussion of 
these two commands, see the Wind River Workbench for On-Chip debugging 
Command Reference. 


You can also choose not to perform an initialization by clearing the Reset box. 


CAUTION: If you are manually changing registers on your target, be aware that 
issuing an IN or INN initialization command will overwrite your changes. 


6. Select Specified Core. 


In the Cores Tied on Reset field, you will see a list of all the cores on your JTAG 
scan chain. If you want your reset and download to affect only one core, click 
on that core in the Cores Tied on Reset field and check Specified Core. If you 
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7. 


want your reset and download to affect all your target boards, click on All 
Cores. 


The Wind River Probe does not support multi-core debugging, so if you are 
using a Wind River Probe, you do not need to set the Cores Tied on Reset field. 


Select the Download tab. 


Figure 5-1 Download Tab 


——_—————— ie — 
@ main | © Projects to Build | # Reset | @ Download | @# Instruction Pointer | # Run Options | y Source | = Common 
PPC7SOFX 


Filename Download Verify Load Symbols = Offset 
cdemo.elf - C:/WindRiver/standalone-1.0/samples/c_demd_..._][¥] None ¥ 
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Click Add Files. 


In the browser window that appears, navigate to the executable file you want 
to run. This example shows the PowerPC version of the executable cdemo.elf 
file from the sample C Demonstration Project. 


The file you select appears in the Filename field. Repeat this process as many 
times as necessary. 


The file at the top of the list will download to the target first, followed by the 
others from the top down. You can edit the order of the list by clicking on any 
filename to highlight it and using the Up, Down and Delete buttons. 


Use the other fields to configure the download. 


The Download field is selected by default. If you clear it, the file will remain 
on the list but will not download data to the target. This is useful if, for 
example, you only want to download symbol information and not data. 


10. 


5 Defining a Launch Configuration 
5.2 Creating a Launch Configuration 


The Verify field configures the extent to which the file you are downloading 
will be compared to a file that may already be on the target. By default this 
field is set to None. 


The Load Symbol field, which is selected by default, determines whether the 
symbol information from the file is downloaded to the target. 


In the Offset field, you can enter a value in hex to set a memory offset bias for 
your application file. If you do not enter a value, Workbench will use the 
default value 0x00000000. 


Select the Instruction Pointer tab. 


@ Main @ Reset #@ Download eases a @ Run Options * Projects to Build '% Source [] Common 
Y 


11. 


MPC8260 


Set instruction pointer after download 


Ouse specified start address 


Set the starting point for your file. 


By default, the instruction pointer is set to use the starting address from the 
download file. However, you can set it to start the file from the first occurrence 
of a particular symbol (for example, main) or you can just specify a starting 
address by typing the address value in hex in the Use Specified Start Address 
field. 


If you do not want to set a starting point, clear the Set Instruction Pointer 
After Download box. 
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12. Select the Run Options tab. 


@ main) © Projects to Build | @# Reset | # Download | @ Instruction Pointer | * Run Options | y% Source | [5 Common 
PPC?SOFX 

@®Do not run 

Oyun to symbol 

ORun to address 


|_| 


Oyun to end of program 
(J Break at Exit 


[J Play post download script 


13. Determine how you want your file to run. 


By default, the launch configuration is set not to run the file after 
downloading. If you want the file to run, you have several options to 
determine where it should break: 


« You can set it to break at the first occurrence of a symbol (for example, 
main) by checking the Run to Symbol box and entering the symbol in that 
field. 


« You can set it to break at a given memory address by checking the Run to 
Address box and entering the address in hex in that field. 


* You can set it to break at an _exit routine by checking the Break at Exit box. 


If you need to perform a post-initialization, you can define it here. Select the 
Play Post Download Script box and click Browse. In the browser window that 
appears, navigate to your initialization file. 


14. Select the Source tab. 
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Figure 5-2. Source Tab 


@ main | © Projects to Build | @ Reset | # Download | # Instruction Pointer | # Run Options & Source [= ) Common 
Source Lookup Path: 


SB ed Default 


S§ Debugger Path in Filesystem 


(|Search for duplicate source files on the path 


15. Use the Source tab to configure the source path of your file. 


Workbench uses the input path of the local file system by default. Unless you 
need to use a different path, you do not need to do anything in the Source tab. 


If you need to use a different path, click Add... and use the Add Source dialog 
to configure the appropriate search path for your project. 


16. Select the Common tab. 
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Figure 5-3 Common Tab 


@. main | © Projects to Build | # Reset | # Download | @# Instruction Pointer | # Run Options | %y Source Common 


Save as 


Local file 

OShared file: 

Display in favorites menu Console Encoding 
CO @run © Default (cp1252) 
CO) ¥$-Debug © Other 


Standard Input and Output 
Allocate Console (necessary for input) 


CFile: 


Launch in background 


17. Specify whether your launch configuration is local or shared. 


The configuration is local by default. To make it shared, click Shared and 
browse to the shared directory where you want the configuration to be located. 


18. Select Debug. 


This will make this launch configuration visible in the Debug menu in the 
Workbench toolbar, so you can return to it and launch it at any time. 


You have now fully defined your launch configuration. 
19. Launch or close the configuration. 
To launch the reset and download operation now, click Debug. 


Workbench will first initialize the target board, then download the file, then 
run the file. You can proceed to step through instructions and debug the file as 
explained in the Wind River Workbench User’s Guide. 


To save the launch configuration without downloading and running the file, 
click Close. 


The name you gave this configuration is now visible in the Debug menu in the 
Workbench toolbar. To launch it at any time, click the menu arrow next to the 
Debug icon. A list of launch configurations will appear; choose the one you 
want to launch. 
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NOTE: Clicking on the Debug icon itself will automatically launch the most 
recently used launch configuration. 


5.3 Other Options 
To create a duplicate of an existing launch configuration, highlight the 
configuration name and click the Duplicate button. 


To delete an existing launch configuration, highlight the configuration name and 
click the Delete button. 


To set which launch configurations the Launch Configuration dialog shows, click 
the Filter button. 
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Using Board Descriptor Files 


6.1 Introduction 87 

6.2 Board Descriptor Files 88 

6.3 Creating a New Board Descriptor File 89 

6.4 XML Board Files 98 

6.5 Manually Creating XML Board Files 101 

NOTE: This chapter applies only to applications that involve multi-core 
debugging. For single-core debugging, you do not need to use a board descriptor 


file. Multi-core debugging is not supported for the Wind River Probe. This chapter 
applies only to the Wind River ICE SX. 


6.1 Introduction 


Wind River emulators use the Joint Test Action Group (JTAG) interface to 
communicate to the target microprocessor, and share this interface with 
boundary-scan board-circuit testing. The JTAG interface follows the IEEE 1149.1 
boundary-scan (JTAG/ Test Interface) specification. 


The JTAG interface consists of a set of five signals, three JTAG registers, and a test 
access port (TAP) controller. The TAP controller is typically embedded in the target 
microprocessor or device. The information related signals are TDI (Test Data In) 
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and TDO (Test Data Out). The boundary-scan register chain (data) includes 
registers controlling the direction of the input/output drivers, as well as registers 
reflecting the signal value received or driven. The expectation and details of 
particular CPU chains are encoded directly into the emulator firmware. 


Each device sharing the JTAG interface employs a serial stream of relative data. 
The data streams for all devices can be chained together. An associated process can 
scan the combined chain to extract any particular device’s information. 


For additional information about JTAG operations, refer to the IEEE 1149.1 
specification at http://standards.ieee.org. 


6.2 Board Descriptor Files 


In most cases you do not need to concern yourself with the JTAG board file. 
However, when performing multi-core debugging, or when debugging a target 
that has other devices besides the processor on the scan chain, your 

Wind River ICE SX requires a board descriptor file to correctly set up the JTAG 
scan chain for your target. 


The board file provides a description of each of the devices that are included in the 
scan chain, and provides information about each device. 


All Wind River target boards are shipped with a board descriptor file that works 

for that target board. If you are using a Wind River target board, you can specify 

the default board descriptor file for that target in the New Connection Wizard in 
Wind River Workbench, as described in the Wind River ICE SX Hardware Reference: 
Establishing Communications. 


NOTE: If you choose to modify a board descriptor file that was shipped with 
Wind River Workbench, save your modified file with a different name to prevent 
overwriting the default file. 


Board descriptor files are written in extensible Markup Language (XML). 
However, it is easiest to create or modify board files using Workbench. The 
software allows you to create and catalog scan chain devices such as processors, 
complex programmable logic devices (CPLDs), field-programmable gate arrays 
(FPGAs), and application-specific integrated circuits (ASICs), and from that 
catalog create a board file that properly describes the scan chain on your target. 
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A CAUTION: Your board file must list the devices included on your scan chain in the 
same order as they are physically laid out on the target. If the board file and the 
physical scan chain do not match, the board file for your target will not work. 


6.3 Creating a New Board Descriptor File 


Workbench uses JTAG Editor to create and modify board files. To use the JTAG 
Editor view, you must first have an active project running. For information on 
creating projects, see the Wind River Workbench User’s Guide. 


To create a new board file: 
1. Open your project in Workbench. 
2. Select File > New > JTAG Board Layout. 


The Create Board File dialog appears, as shown in Figure 6-1. 


Figure 6-1 Create Board File Dialog 


Create Board File 
The Folder is empty. 


Enter or select the parent Folder: 


# [S Test_OCD_Project (Wind River Standalone (No Operating System) Pla 


< ] > 


File name: “debugl layout 


Advanced >> 


Cancel 


89 


Wind River Workbench for On-Chip Debugging 
User Tutorials, 2.6.1 


Wind River Workbench automatically populates the Parent Folder field with 
your active project. In the File Name field, type a name for your board file. This 
creates a .layout file, which JTAG Editor will use to create a .brd file in the next 
step. 


The example shown in Figure 6-1 creates a file called debug1.layout for the 
project debug]. 


3. Click Finish. 
This opens the JTAG Editor view, as shown in Figure 6-2. 
NOTE: JTAG Editor edits a .layout file, which is a graphic representation of the 


board layout. A .brd file cannot be created until you have created a JTAG 
layout, such as the one shown in Figure 6-4. 


Figure 6-2. JTAG Editor 
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Using the Predefined Layouts in JTAG Editor 


JTAG Editor includes predefined graphic layouts for one, two, three, and four 
cores, which are displayed in the Editor toolbar to the left of the editing field, 
as shown in Figure 6-3. 


Figure 6-3. JTAG Editor Toolbar 
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In the rare case where you need to debug more than four cores at the same 
time, the JTAG Editor also includes a Custom option. See Using the Custom 
Option in the JTAG Editor View, p.95, for more information. 


4. Inthe JTAG toolbar, click Select. 
5. Under Scan Chain, pick the number of cores you need to debug. 


For example, if the debug] project has two cores, click on Dual Core under the 
Scan Chain heading and drag it into the editing field, as shown in Figure 6-4. 
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NOTE: The core icon must be clicked and dragged into the editing field. Just 
clicking on it will not do anything. 


Figure 6-4 Dual Core Layout 
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NOTE: You can only drag one predefined layout into the editing field at a time. 
If you drag ina second layout, it will overlay the first, causing confusion. 


The editing field now shows a graphic representation of the scan chain. Notice 
that the two cores are labelled Undefined. They have no properties until you 


assign them in the next step. 
6. Double-click on the first core. 


The Device Setup dialog appears, as shown in Figure 6-5. 
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Figure 6-5 Device Setup 
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Use the dialog to select your processor type. The example in Figure 6-5 shows 
a PPC750EFX processor. 
7. Click OK. 


You are returned to the Device Debug Perspective. The first core is now 
defined as a PPC750FX, and the Properties view is displayed. 
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Figure 6-6 Defining the Core 


i Embedded Debug - JTAG Board Editor - Wind River Workbench 2.2 


You can use the Properties view to finish defining the first core. 


Figure 6-7 Properties View 
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Click on any property to modify it. 


Clicking on the Register File property will open a browser window; use the 
browser to navigate to the register file you want to use. 


Your first core is now defined. To define your second core, double-click on it and 
repeat Steps 6 through 8. 


If both cores use the same processor type, make sure you edit the Designator value 
in the Properties view. Workbench does not allow two cores to have the same 
unique designator. For example, in Figure 6-7 the first core’s designator is 
DES_7XX_04. If your second core is the same processor type as the first, the same 
designator will appear in the Properties window. Click on the Designator value to 
change it to (for instance) DES_7XX_05. 


Once you have defined all your cores, you can create your board file. 


9. 


10. 


11. 


Right-click on the editing area. In the dialog that appears, choose Export Board 
File. 


A browser window appears. Choose the folder you want to save your board 
file in. 


In the File Name field, type the name you wish to assign to your board file. 
In the example, the board file name is debug1.brd. 
Click Save. 


Using the Custom Option in the JTAG Editor View 


In the rare case where you need to debug more than four cores at the same time, 
JTAG Editor uses a Custom option to create a new board file piece by piece. 


1. 
2 


In the JTAG toolbar (Figure 6-3), click Custom. 
Construct your layout using the elements under the Custom heading. 


The elements available are an input node (TDI) and a termination node (TDO), 
as well as CPUs, ASICs, FPGAs, and peripherals. To add an element, click on 
its icon and drag it into the editing field. 


Figure 6-8 shows a partially completed layout with an input, a terminator, 
three CPUs, and a peripheral device. 
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Figure 6-8 Partial Custom Layout 
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Once you have your terminating nodes and devices laid out, you need to 
connect them. 


In the JTAG toolbar, click Connections. 


When you move the cursor back into the editing field, it now looks like a 
power cord. 


Click on the input node. 
Move the cursor to your first processor and click again. 
A connection line joins the input node and the processor. 


Click on the first processor, move the cursor to the second processor, and click 
on it. 


A connection line joins the two processors. 


Continue this process until you complete the circuit by clicking on the 
terminator node. 
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Figure 6-9 Completed Custom Layout 
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8. When you have connected all devices and nodes, click Connections again. The 
cursor returns to normal. 


Your custom board is now laid out. Define its properties and generate your .brd 
file by following Steps 6-11 in Using the Predefined Layouts in JTAG Editor, p.91. 


Editing Your Board Layout 


To remove a device, node, or connection from your layout, use the Select button or 
the Marquee button in the JTAG toolbar. 


To use the Select button, click Select in the toolbar. Then click on any device, node, 
or connection to highlight it and press Delete. 


To use the Marquee button, click Marquee in the toolbar. You will see that the 
cursor now appears as a crosshair in the editing field. Hold the mouse button 
down and drag the cursor to create a box around the device you wish to highlight, 
then press Delete. 
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NOTE: The Marquee button can only highlight devices, not nodes or connections. 


You can also edit your layout using the Outline view in Workbench. In the 
Workbench toolbar, click on Window. Select Show View > Outline. 


The Outline view appears as shown in Figure 6-10. 


Figure 6-10 Outline View 
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The Outline view displays the elements of your layout in the order they were 
added. Click on any element to highlight it and press Delete. 


Using the Outline view in this way is handy if you have accidentally overlaid one 
layout on top of another, or if you want to back up and start again. Use the list in 
the Outline window to delete any or all of the contents of the JTAG editing field. 


6.4 XML Board Files 


Board descriptor files are created in extensible Markup Language (XML). You can 
view the XML version of your board file by opening your .brd file in a text editor, 
or by selecting File > Open in Workbench and navigating to the .brd file in the 
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6.4 XML Board Files 


browser window that appears. The XML text will appear in the Workbench Editor. 
An example board descriptor file is shown below. 


Board File XML version 


(Aeepcrsorx: | @*T1aGBoardedtor fT eee ee a) 


<DEVICE_ TABLE> * 
<TABLE _MODE>SLOW</TABLE_MODE> 
<TABLE_CLOCK>16Mhz</ TABLE _CLOCK> 
<TABLE_MULTI>ENABLE</TABLE_MULTI> 
<TABLE_TIED_RESET>OFF</TABLE_TIED_RESET> 
<DEVICE> 
<NAME>PPC7SOFX</NAME> 
<DESCRIPTION>IBM Power PC 750FX Processor</DESCRIPTION> 
<TYPE>MICROPROCESSOR</ TYPE> 
<TARGET>PPC7S50FX</ TARGET> 
<SELREG_FILE></SELREG_FILE> 
<DESIGNATOR>DES_7XX_04</DESIGNATOR> 
<IR_LEN>8</ IR_LEN> 
<ASF_FILE></ ASF_FILE> 
<REG_FILES> 
</REG_FILES> 
<MEMORY_MAP> 
<MEMORY_MODE>DEF AULT</ MEMORY_MODE> 

</MEMORY_MAP> 

</DEVICE> 

<DEVICE> 
<NAME>PPC7S5S0F X</NAME> 
<DESCRIPTION>IBM Power PC 750FX Processor</DESCRIPTION> 
<TYPE>MICROPROCESSOR</ TYPE> 
<TARGET>PPC750FX</ TARGET> 
<SELREG_FILE></SELREG_FILE> 
<DESIGNATOR>DES_7XX_05</ DESIGNATOR> 
<IR_LEN>8</ IR_LEN> 
<ASF_FILE></ASF_FILE> 
<REG_FILES> 
</REG_FILES> 
<MEMORY_MAP> 

<MEMORY_MODE>DEF AULT</ MEMORY_MODE> 

</MEMORY_MAP> 

</DEVICE> 

</DEVICE_TABLE> 


This is the debug1.brd board file created in Using the Predefined Layouts in JTIAG 
Editor, p.91. The first block of code contains comments that describe what the target 


reference design is set for; the next blocks of code define the devices included in 
the file. 


For information on board file fields, see 6.4.1 XML Board File Fields, p.100. 


NOTE: If you choose to modify a board descriptor file shipped with your system, 
it is best to save your modified file with a different name to prevent overwriting 
the default file. 
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6.4.1 XML Board File Fields 


The board descriptor file contains comments, <DEVICE_TABLE >fields, and one 
or more <DEVICE> field-sets. A <DEVICE_TABLE> specifies common and 
rudimentary scan-chain (signal) operational functions and provides a list of 
<DEVICE> descriptions for each device sharing the JTAG interface. 


<DEVICE_TABLE> Fields 


<TABLE_MODE> 


This field designates the scan-chain characteristics applicable to the devices on the 
chain. It can be set to FAST or SLOW. This also relates to the optimization 
implementation on the emulator. When in doubt, set it to SLOW. 


<TABLE_CLOCK> 


This field specifies the JTAG strobe rate, in MHz, for the information signals Test 
Data In (TDI) and Test Data Out (TDO). This is analogous to the emulator 
configuration option CF CLK clock_rate. They are not always automatically 
synchronized, so check your emulator to make sure you have the CF CLK option 
set to the same clock rate specified in the board file. The fastest JTAG clock rate is 
16 MHz. 


<TABLE_MULTI> 


Set this field to ENABLE if you are debugging multiple targets on the same JTAG 
interface. Otherwise set it to DISABLE. 


<TABLE_TIED_RESET> 
Set this field to ON only if your target board’s RESET and TRST signals on the JTAG 


interface are physically connected (tied together.) 


<DEVICE> Fields 


<NAME> 


A reference name for the target device. 


<DESCRIPTION> 


A reference description of the target device. 
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<TYPE> 
The valid types are MICROPROCESSOR, CPLD, FPGA, INTERFACE, and 
OTHER. 

<TARGET> 


The CPU type. The run-time processes on Wind River emulators require this 
information in order to match the exact JTAG scan chain and JTAG-specific 
characteristics. 


<DESIGNATOR> 


A mandatory field that Workbench uses to distinguish between devices. Typically 
this is set to UO, U1, U2... 


Make sure you use a unique <DESIGNATOR> tag for each target device. 
Workbench does not allow two devices to use the same designator. 
<IR_LENGTH> 


Use this field to specify the length, in bits, of the target device’s JTAG Instruction 
Register. To find this information, consult the manufacturer’s specification for the 
target device. 


6.5 Manually Creating XML Board Files 


If you need a custom board file, it is usually easiest to take one of the generic board 
files from installDir/workbench-version/dfw/build/host/boardfiles and modify it to 
suit your needs. Remember to save it with a different name if you want to preserve the 
original file. 


To create a board file that properly describes the scan chain on your target: 
1. Open a text editor. 

2. Begin the board file with the tag <DEVICE_TABLE>. 

3. Lay out the header block. 


The first block of XML defines mode, clock speed, and status of multi-core 
debugging. An example would look like: 
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The 
this 


<TABLE_MODE>SLOW</TABLE_MODE> 
<TABLE_CLOCK>16Mhz</TABLE_CLOCK> 
<TABLE_MULTI>ENABLE</TABLE_MULTI> 
<TABLE_TIED_RESET>ON</TABLE_TIED_RESET> 


This example is set for slow mode, with a clock speed of 16 MHz; it is enabled 
for multi-core debugging, and it is set to issue RST reset commands (which 
affect all cores) rather than IN reset commands (which affect only one core.) 


next blocks of XML define the devices included in the file. Workbench needs 
information so that it can position the devices in the correct location in the 


25-bit data stream. The physical location of each device can also be determined by 
its position in the board descriptor file. 


4. 
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Lay out the block for the first device. 

A device block begins with the tag <DEVICE>. An example would look like: 

<DEVICE> 
<NAME>MPC8260</NAME> 
<DESCRIPTION>Motorola Power PC 8260 Processor</DESCRIPTION> 
<TYPE>MICROPROCESSOR</TYPE> 
<TARGET>MPC8260</TARGET> 
<DESIGNATOR>U0</DESIGNATOR> 
<IR_LEN>8</IR_LEN> 

</DEVICE> 

This example describes a PowerPC 8260 target. 

Repeat Step 4 for every device on the JTAG scan chain. 


Your board file must list the devices included on your scan chain in the same 
order as they are physically laid out on the target. If the board file and the 
physical scan chain do not match, the board file for your target will not work. 


When you are finished, your board file should look something like this: 
<DEVICE_TABLE> 
<TABLE_MODE>SLOW</TABLE_MODE> 
<TABLE_CLOCK>16Mhz</TABLE_CLOCK> 
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<TABLE_MULTI>ENABLE</TABLE_MULTI> 

<TABLE_TIED_RESET>OFF</TABLE_TIED_RESET> 

<DEVICE> 
<NAME>MPC8260</NAME> 
<DESCRIPTION>Motorola Power PC 8260 Processor</DESCRIPTION> 
<TYPE>MICROPROCESSOR</TYPE> 
<TARGET>MPC8260</TARGET> 
<DESIGNATOR>U0</DESIGNATOR> 
<IR_LEN>8</IR_LEN> 

</DEVICE> 

<DEVICE> 
<NAME>PPC750FX</NAME> 
<DESCRIPTION>IBM Power PC 750FX Processor</DESCRIPTION> 
<TYPE>MICROPROCESSOR</TYPE> 
<TARGET>PPC750FX</TARGET> 
<DESIGNATOR>U1</DESIGNATOR> 
<IR_LEN>8</IR_LEN> 

</DEVICE> 

</DEVICE_TABLE> 


This example describes two targets, but you can add as many <DEVICE> 
blocks as you need to describe your JTAG scan chain. 


When you are finished, save the file with the extension .brd. 
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7.1 Introduction 


NOTE: This chapter applies only to the Wind River ICE SX. Multi-core debugging 
is not supported for the Wind River Probe. 


The Wind River ICE SX emulator allows you to control and manipulate multiple 
devices on a single scan chain ring. The devices included on the JTAG scan chain 
can be CPUs, EPLDs, CPLDs, FPGAs, and ASICs, as well as various other devices. 
Wind River ICE SX manages all of the devices on a scan chain through the use of 
JTAG Server, which resides on the ICE unit and works via the OCD link on the 
target. 
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Using the Wind River Workbench software and a Wind River ICE SX, users can 
have multiple debug sessions active at the same time, allowing developers to 
debug multiple devices at once. 


JTAG Server is the software layer that allows ICE to handle multi-core debugging. 
JTAG Server is set up by a board descriptor file, which identifies the devices that 
are included in the scan chain on your target. Board descriptor files are highly 
specific to your target since they clearly describe the scan chain, so if you do not 
have a board file already available for your specific target, you must write one. For 
information on creating board files for your target, see 6. Using Board Descriptor 
Files. 


7.2 JTAG Server 


JTAG Server is a multi-core debugging solution that uses the On-Chip Debugging 
(OCD) link on your target reference design to connect to one or more CPUs, with 
or without other devices in the scan chain. JTAG Server is what allows ICE to 
connect to multiple devices on a single JTAG scan chain at once. 


Wind River ICE SX is networked, and JTAG Server resides on the ICE unit. This 
means that in addition to being able to have multiple debug sessions with the 
target from a single host computer, you can also have multiple debug sessions 
running on multiple host computers, all accessing ICE over the network. 


JTAG Server is a software layer that resides between the low-level JTAG drivers 
and the high-level user interfaces on Wind River ICE SX. This layer provides all of 
the control that is needed to position data correctly on the scan chain (this is a 
requirement for compliance with the IEEE 1149.1 specification for multiple devices 
on a single scan chain ring). 


There are hardware optimizations included in JTAG Server that allow the 
utilization of the entire available JTAG bandwidth. This is a key element of high 
performance multi-core debugging; the peak clock speed is not as important as the 
aggregate data transfer, which is maximized in JTAG Server. 


JTAG Server requires a board descriptor file that clearly describes your target scan 
chain layout. This file is what tells JTAG Server how to correctly position devices 
on the scan chain. Information on board descriptor files, including information 
about creating your own is available in 6. Using Board Descriptor Files. 


106 


7 Debugging Multi-Core Targets 
7.3 Multi-Core Debugging 


7.3 Multi-Core Debugging 


This section describes how to work with multiple devices on your scan chain at 
once. Before beginning, please make sure that you have obtained or created a 
board descriptor file for your target that accurately reflects your target’s scan 
chain. 


7.3.1 Establishing Communications with Multiple Devices 
The following steps describe how to connect to multiple devices at once using the 
Wind River Workbench software. 


1. First, open Workbench according to the method for your host computer. 


Linux/Solaris Hosts 
From your installation directory, issue the command 
$ ./startWorkbench.sh 
Windows Hosts 
Select Start > All Programs > Wind River > Wind River Workbench version. 


On Windows hosts, Workbench prompts you to specify a workspace location. 
Linux/Solaris hosts use the default location installDir/workspace. 


When Workbench opens, the Quick Target Launch dialog appears. 
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Wind River On Chip Debugging 
@ Choose How You Want to Start 


2. Select Create a new launch configuration. 


The Connection Type dialog appears. 
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% New Connection 


Connection Type 


Please select connection type. 


Wind River OCD ISS Connection 

Wind River OCD Probe Connection 

Wind River VxWorks 6.x Core Dump Connection 
Wind River ¥x\Works 6.x Simulator Connection 
Wind River VxWorks 6.x Target Server Connection 


Cancel 


3. Choose Wind River OCD ICE Connection from the list of options and click 


Next. 
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The Communication Settings dialog appears. 


‘W) New Connection 


Wind River ICE Communication Settings 


Please select the communication settings For the emulator 


©) Configure communication settings manually 


O Configure communication settings through a serial port 


Configuring Communication Settings Manually 


NOTE: To use this option you will need to know either the network name of the 
emulator or its IP address. For information on assigning these values, see the 
Wind River ICE SX for Wind River Workbench Hardware Reference. 


4. Select Configure communication settings manually and click Next. 
The Emulator Settings dialog appears. 


5. Inthe Designators area, select Board File and click Browse to navigate to the 
board file that describes your multi-core setup. For information on board files, 
see 6. Using Board Descriptor Files. 


The field below the Board File field will populate with a summary description 
of your board. 
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6. Inthe Communications area, fill in the IP Address field with the IP address 
you have assigned to your ICE unit. 


This example shows the emulator settings dialog box with the board file for a 
Wind River SBC PowerQUICC II 8270 selected. 


“) New Connection 


Wind River ICE Settings 


Configure the designator settings for the emulator, 


Designators 


OProcessor: | 


Ole per SEC; WindRiver SBCPowerQUICCIL 8270. brdfing 


» Designator Processor Processor Plugin 
Mj ut MPC8270 PowerPC 82xx Family Processor Plugi 


Ie. 
Communications 
Emulator Hostname } IP Address: | 90,17,0,29) 


7. When you have entered the correct processor or board file and IP address, click 
Next. 


The Target Operating System Settings dialog appears. 
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Wy, New Connection 


Target Operating System Settings 


Select the target operating system which is currently booted on the 
configured target. 


Available CPU{s) on target board: 


Target operating system settings 


Booted Target OS on selected CPU: [None 


Description: 
Providing plugin: 


Kernel image: Browse... 


Kernel image is optional for None 


Target OS plugin pass-through options: 


10. 
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In the Booted Target OS on selected CPU field, select the operating system 
that is running on your target processor. The default is None. 


Next to the Kernel Image field, click Browse to navigate to the kernel image 
you wish to specify. If you selected None in the previous step, you do not need 
to specify a kernel image. 


If you are using a Linux plug-in specify the pass-through options in the Target 
OS Pass-Through Options field. If you are not using a Linux plug-in, skip this 
step. 

Options are passed as pairs in the format name=value. Separate options with a 
comma. The following options are available: 

*  notasklist=1 : Never fetch process list. 


*  noautomodules=1 : Do not plant internal breakpoints to do automatic 
kernel module load/unload detection. When this option is specified, you 
must manually refresh to see an updated module list. 
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* noloadcheck=1 : Do not issue gophers until the hardware breakpoint is 
used to detect kernel load triggers. This option is for “sensitive” boards 
that don’t accept access until the kernel loads and sets up memory 
mapping. 

* loaddetectloc=symbol or address: Set the hardware breakpoint used to 
detect kernel load at symbol (for example, loaddetectloc=start_kernel) or 
address (for example, loaddetectloc=0x1000). If you do not specify a 
symbol or address, Workbench uses a default. For most architectures the 
default is start_kernel; for PowerPC targets, the default is 0x0. 


11. Click Next. 


The Memory Options dialog appears. 


“) New Connection 


Memory Options 


Specify the memory options for the target cpu. 


Available CPU{s) on target board: 


Memory mapping 


Offset Attributes 


Undefined memory areas accessible 


Use the Memory Options dialog to specify how memory on the target is 
partitioned, and what the attributes of the particular memory regions are. 
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NOTE: The Memory Options dialog is only necessary for Linux or other 
non-VxWorks target operating systems. 


To specify an area of memory, click Add. 


The Set Memory Map dialog appears. 


%%) Memory mapping 


Please specify the offset, size and attributes for the memory mapping. 


Offset: /5xo0000000 | 


Size: /oxooo00000 


Attributes 


Invalid 


[_]Read 
Access size (bit): 
Default access size (bit); 
[_] Write 
Access size (bit): 


Default access size (bit); 


[| Read/Write 
Access size (bit): 


Default access size (bit): 


Use the Set Memory Map dialog to specify which memory areas are read-only, 
read-write, or write-only, and to specify the access width Workbench should 
use to read the data from those regions. 
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12. Click Next. 
The Object Path Mappings dialog appears. 


i) New Connection 


Object Path Mappings 


Specify how Files in the target file system are visible in the host file system, 


Available CPU(s) on target board: 


¥| Load module symbols to debug server automatically if possible 


Pathname prefix mappings: 


¥ Target Path Host Path 
| M <any > leave path unchanged> 
‘ » 


Basename mappings: 
[*;*.unstripped],[*;*] 


Help < Back Next > F 


Use the Object Path Mappings dialog to specify how files in the target file 
system are visible in the host file system. 


13. ‘To adda host or target path, click Add and type the path in the dialog that 
appears. 


14. Click Next. 
The Target State Refresh dialog appears. 
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®% New Connection 


Target State Refresh 


Configure the cores) target states refresh settings. 


Available CPU(s) on target board: MPcos: 


Initial target state query settings 

(] Query target object lists and target object states on connect 

(J Query target object state(s) on stopped events 

7] Query target object state(s) on running events (receiving object only) 


Target state refresh settings 
@ Refresh the target state manually only 


O Auto-refresh the target state periodically 


[listen to execution context life-cycle events (context-start, context-exit) 
It is not known if life-cycle events for execution contexts are provided. 


Use the Target State Refresh dialog to configure the target state query and 
target state refresh settings on your target processor. 


15. Click Next. 
The Default Breakpoints dialog appears. 
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~) New Connection 


Default Breakpoint Options 


Select the default breakpoint options for newly created breakpoints. 


Available CPUfs) on target board: 


Default Breakpoint Stop Scope 
O>Stop all 
©) Stop triggering thread 


Use this dialog to set default breakpoint options for newly created 
breakpoints. 


16. Click Next. 


The Connection Summary dialog appears. 
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New Connection 


Connection Summary 


Please review the connection information 


Connection name: | WRICE_WindRiver_SBCPowerQUICCII_8270 Shared: [] 


Summary 


Property Value 
ADDR 255.17.0,.29 
BFNAME C:/workbench2.4/workbench-2.4/dFw/0121/hos 
BFNAMETIMESTAMP 1127228021000 
+ DESIGNATORMAP 
DEVICE Wind River ICE 
NAME_MAPPING [*;*.unstripped],[*;*] 
PATH_MAPPING Gd 
STYLE ETHERNET 


Immediately connect to target if possible 


17. Verify that the displayed values are correct. 


If you want to connect to your target now, select Immediately connect to 

target if possible. If you do not wish to connect to your target now, leave the 
Immediately connect to target if possible box unchecked. You can connect at 
any time by clicking the Connect button in the Launch Configuration dialog. 


18. If you want to share your target connection, select Shared. 
This option serves a dual purpose: 


» When you define a target connection configuration, this connection is 
normally only visible for your user-id. If you define it as Shared, other users 
can also see the configuration in your registry, provided that they connect to 
your registry by adding it as a remote registry on their computer. 


* Normally, when you disconnect a target connection, the target server (and 
simulator) are killed because they are no longer needed. Ina connection that is 
flagged as Shared, however, they are left running so that other users can 
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connect to them. In other words, you can flag a connection as shared if you 


want to keep the target server (and simulator) running after you disconnect or 


exit Workbench. 
19. Click Finish. 


Workbench creates the connection name in the Target Manager view. 


If you decide you want to change your emulator settings, you can return to the 
Emulator Settings dialog box by right-clicking on the connection name in the 


Target Manager and clicking Properties. 


Your Wind River ICE SX is now connected to the host computer and your 
target. 


7.4 Initializing the Targets 


After Workbench connects to the Wind River ICE SX, the Reset and Download 
view opens. 


W WRICE_WindRiver_SBCPowerQUICCII_8270 - U1 


Modify attributes and launch. 


Name: | WRICE_WindRiver_SBCPowerQUICCII_8270 - U1 


|< Main ead Reset | Download @ Instruction Pointer | # Run Options ** Projects to Build {Source [=] Common 


Connection 


[ Create a New Target Connection ] 


Connection to use: | WRICE_WindRiver_SBCPowerQUICCII_8270 (localhost) v Hide unconnected 


WRICE_WindRiver_SBCPowerQUICCII_8270 - WRICE_WindRiver_SBCPowerQUICCII_8270 is connected, 


Core: |U1 ral 


20. Choose how you want to proceed: 
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21. 


a. Ifyou want to create a project in which to run and debug your code, skip 
the rest of this section and proceed to 7.5 Creating a Project, p.125. 


b. If you want to run and debug your code without creating a project, 
continue with this section. 


In the Reset and Download view, select the Reset tab. 


Name: [ WRICE_WindRiver_SBCPowerQUICCII_8270 - U1 


@ Main [Reset Wad Download | # Instruction Pointer #* Run Options | ** Projects to Build by Source |) Common 
—— 


22. 


23. 


24. 


25. 


ul 


(iPlay register file 


a) Reset IN - Reset/setup regs ¥| Query Target 
@ Specified core 
OdaAllcores 


Cores tied on reset: 


If you want to configure the target register values with a register file, select 
Play Register File and browse for the file you want to use. 


Register files for many Wind River-supported targets are located in 
installDir'workbench-2.x/dfw/build/host/registers. 


If you do not want to reconfigure your target registers, leave this box 
unchecked. 


Choose the type of reset initialization you want to perform. 


You can use the IN or INN initialization commands. For a full discussion of 
these two commands, see the Wind River Workbench for On-Chip Debugging 
Command Reference. 


You can also choose not to perform an initialization by clearing the Reset box. 


CAUTION: If you are manually changing registers on your target, be aware that 
issuing an IN or INN initialization command will overwrite your changes. 


By default, the reset and download affects only the first core. If you want the 
reset and download to affect all connected cores, select the All Cores radio 
button and click Apply. 


Select the Download tab. 
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Name: | WRICE_WindRiver_SBCPowerQUICCII_8270 - U1 


@ Main’ @ Reset [. Download Weg Instruction Pointer @# Run Options ** Projects to Build ty Source [] Common 
ut 


26. 


File Download Verify Load Symbols Offset 
Click Add Files. 


In the browser window that appears, navigate to the executable file you want 
to run. 


The file you select appears in the Filename field. Repeat this process as many 
times as necessary. 


The file at the top of the list will download to the target first, followed by the 
others from the top down. You can edit the order of the list by clicking on any 
filename to highlight it and using the Up, Down, and Delete buttons. 


27. Use the other fields to configure the download. 


Download 


The Download field is checked by default. If you clear it, the file will remain 
on the list but will not download data to the target. This is useful if, for 
example, you only want to download symbol information and not data. 


Verify 


The Verify field configures the extent to which the file you are downloading 
will be compared to a file that may already be on the target. There are three 
options: Full, Compare, and None. 


When this field is set to Full, a write/read verify will occur for every 
download. Workbench will write to the target and then verify that the write to 
the target and the read from the target are identical. This is slower than a 
normal download, but it is a useful security option. 


When the field is set to Compare, Workbench will verify that the image has 
been downloaded correctly (that is, that the image on the host is the same as 
the image on the target.) This is useful for programming flash. 
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NOTE: You should only set the Verify field to Compare if an image already 
exists on the target. If you set the field to Compare when there is no image on 
the target, Workbench will look for a file to compare and not find one, and the 
reset and download operation will fail. 


When the field is set to None, Workbench will perform no verification. 


The Verify field is set to None by default. 


Load Symbol 


The Load Symbol field, which is checked by default, determines whether the 
file’s symbol information is downloaded to the target. 


Offset 


28. 


Name: 


In the Offset field, you can enter a value in hex to set a memory offset bias for 
your application file. If you do not enter a value, Workbench uses the default 
value 0x00000000. 


Select the Instruction Pointer tab. 


| WRICE_WindRiver_SBCPowerQUICCII_8270 - U1 


@ Main) @ Reset # Download [Instruction Pointer Wag Run Options ** Projects to Build by Source [=] Common 
—— 


ul 


[Set instruction pointer after download 


Ose specified start address | 


29. 
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Set the starting point for your file. 


By default, the instruction pointer is set to use the starting address from the 
download file. 


You can set the instruction pointer to start the file from the first occurrence of 
a particular symbol (for example, main) or you can just specify a starting 
address by entering the address value in hex in the Use Specified Start 
Address field. 
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If you do not want to set a starting point, clear the Set Instruction Pointer 
After Download box. 


. Select the Run Options tab. 


Name: | WRICE_WindRiver_SBCPowerQUICCII_8270 - Ut 


@ Main @ Reset @ Download @ Instruction Pointer © Projects to Build | '8% Source [=] Common 
7 


31. 


32. 


ul 
@®Do not run 
Ov Run to address | 
O Run to end of program 


(Play post download script 


Determine how you want your file to run. 


By default, the Reset and Download view is set not to run the file after 
downloading. If you want the file to run, you have several options to 
determine where it should break: 


* You can set it to break at the first occurrence of a symbol (for example, 
main) by selecting Run to Symbol and entering the symbol in that field. 


= You can set it to break at the end of your program by selecting Run to end 
of program. 


* You can set it to break at a given memory address by selecting the Run to 
Address box and entering the address in hex in that field. 


«= You can set it to break at an _exit routine by selecting the Break at Exit box. 


If you need to perform a post-initialization, you can define it here. Select the 
Play post download script box and click Browse. In the browser window that 
appears, navigate to your initialization file. 


Select the Source tab. 
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Name: | WRICE_WindRiver_SBCPowerQUICCII_8270-U1 _ _ 


e Main | @ Reset @ Download @ Instruction Pointer #* Run Options ** Projects to Build = Common 
Source Lookup Path: 


H > Default 


33. Use the Source tab to configure the source path of your file. 


Workbench uses the input path of the local file system by default. Unless you 
need to use a different path, you do not need to do anything in the Source tab. 


If you need to use a different path, click Add... and use the Add Source dialog 
to configure the appropriate search path for your project. 


34. Select the Common tab. 


Name: | WRICE_WindRiver_SBCPowerQUICCII_8270 - U1 


@ Main| @ Reset @ Download @ Instruction Pointer | @# Run Options ** Projects to Build Ey Source = 
Save as 
@ Local file 


OSharedfile: | 


Standard Input and Output 
[¥] Allocate Console (necessary for input) 
| File: 


35. Specify whether your launch configuration is local or shared. 


The configuration is local by default. To make it shared, click Shared file: and 
browse to the shared directory where you want the configuration to be located. 


You have now fully defined your reset and download operation. 
36. Click Debug. 


Workbench initializes the target board, then downloads the file, then runs the 
file. 
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The OCD Console view opens to show the progress of the reset and download 
operation. 


Tasks Problems Properties Build Console Error Log Terminal O Trace OCD Command Shell OCD Console X 


"Reset and Download 


Testing Communications to Hardware Interface..., Passed 

Driving HRESET to be High.. inp Passed 

Driving HRESET to be Low Passed 

Waiting HRESET Low Acknowledge. ara Passed 

Attempting JTAG communication... ae Passed 

Waiting for HReset to be released.. : Passed 

Testing for target STOP State Passed 

Comparing target CPU with CF setting Passed 

Waiting for HRESET High Acknowledge : Passed 

Testing JTAG Communication is Passed 

Loading Internal Registers Passed 

Testing JTAG Communication. . Passed 

Getting value of cF mmu option Passed 

Attempting to restore CPU context Passed 
C:\WindRiver\workspace\c_demo_sa\PPC603diab_DEBUG\cdemo. elf COCO) 
Loading symbols... Completed at Default Offset (<1 sec} 
Specified not to Run 

* Reset and Download Completed * 


2 


At this point, all of your devices should be in background mode and you are ready 
to begin debugging all of the devices. 


NOTE: If you cannot get into background mode with any of your devices, first 


make sure your board file is correct for your target. Then see the Wind River ICE SX 
for Wind River Workbench Hardware Reference for troubleshooting tips. 


Proceed to 7.6 Configuring Options for Multi-Core Debugging, p.131. 


7.5 Creating a Project 


If you do not plan to build or edit your source files within Workbench, skip this 
section and proceed to 7.6 Configuring Options for Multi-Core Debugging, p.131. 


Click Close in the Reset and Download view. 
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This tutorial uses the C Demonstration Program, which is included in your 
Workbench installation. 


1. Inthe Workbench toolbar, select File > New > Project. 


The New Project wizard appears. 


New Project 


Select a wizard 


Creates a new OS-agnostic sample project 


Wizards: 


type filter text 


) (> VxWorks 5.5 
C& VxWorks 6.x 
& VxWorks 653 
® Wind River Linux 
(& Examples 
(% Native Sample Project 
wg 
{A} voxWorks 5.5 Downloadable Application Sample Project 
IR® VxWorks Downloadable Kernel Module Sample Project 
FP? VxWorks Real Time Process Sample Project 
(9 Wind River Linux Application Sample Project 
(8 Wind River Linux User-Defined Sample Project 


fF) 


1) 


[| Show All Wizards. 


Cancel 


2. Expand the Examples folder and select Standalone Sample Project. 
3. Click Next. 


A sample project template appears. 
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%) New Project Sample 


Sample Project Template 


Select a sample project template. 


Available Examples: Information: 


C Demonstration Program C Demonstration Program 


(C++ Demonstration Program This program demonstrates various C 
| The Ball Demonstration Program language features including structures, 


=. : character arrays, linked lists, and 
1S The Panel Demonstration Program recuraor: 


You can build and download this program 
to your simulator or target board, The 
default RAM location for the program is 
0x00014000, To change the default 
memory address, edit the simple. |k linker 
command file, 


Features 


The Following Features are demonstrated 
From main(}: 


® Factorials: The FactorialbDemot)} 
__function generates 4 factorial table _ 


4. Select C Demonstration Program and click Finish. 


Workbench creates the sample project in the default workspace folder and 
opens the Application Development perspective. 


5. Inthe Project Navigator view, expand the c_demo_sa project. 
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 ProjectNa... x Symbol Br... | ~ | 


User Build Arguments: v 


eis c_demo_sa (‘Wind River Standalone (No Operating Sf 

By cdemo. elf (MCF-0x00000000-BE-diab_DEBUG) 

@® aRMm-Ox00000000-BE-diab_DEBUG 

ag 4RM-0x00000000-LE-diab_DEBUG 

ae 4RM-0x04000000-BE-diab_DEBUG 

@? aRM-Ox04000000-LE-diab_DEBLIG 

e& 4RM-0x08000000-BE-diab_DEBUG 

oe 4RM-0x08000000-LE-diab_DEBUG 

ee MCF-0x00000000-BE-diab_DEBUG 

@? mcF-0x20000000-BE-diab_DEBUIG 

ee MCF-0x40000000-BE-diab_DEBUG 

e& MIPS32-4KEc-BE-16bit-diab_DEBUG 

e& MIPS32-4KEc-BE-32bit-diab_DEBUG 

cH 28 mIPS32-4KEc-LE-16bit-diab_DEBUG 

it ag MIPS32-4KEc-LE-32bit-diab_DEBUG 

a MIPS32-4Kx-BE-32bit-diab_DEBUG 

@ mips32-4kx-LE-32bit-diab_DEBUG 
MIPS32-BCM-BE-32bit-diab_DEBUG 
MIPS32-BCM-LE-32bit-diab_DEBUG 


e 
e 
 mips32-IDT-BE-32bit-diab_DEBLIG 
ea 
e 
e 


>) 
i) 
a 
>) 
& 
@ 
@ 
& 
i) 
& 
>] 
i) 
ce) 


ca 


+ 


+ MIPS32-IDT-LE-32bit-diab_DEBUG 
MIPS32-PHI-BE-32bit-diab_DEBUG 


MIPS32-PHI-LE-32bit-diab_DEBUG 
mM 


BEA www 


+ 


6. To build the sample project for use with PowerPC targets, right-click on the 
c_demo_sa top-level folder and select Build Options > Set Active Build Spec. 


The Set Active Build Spec and Debug Mode dialog appears. 


128 


7 Debugging Multi-Core Targets 
7.5 Creating a Project 


W Set Active Build Spec and Debug Mode (x) 


PPC603diab 
PPC603diab-WISS 
MIPS32-4KEc-BE-16bit-diab 
MIPS32-4KEc-LE-16bit-diab 
MIPS32-4KEc-BE-32bit-diab 
MIPS32-4KEc-LE-32bit-diab 
MIPS32-4Kx-BE-32bit-diab 
MIPS32-4Kx-LE-32bit-diab 
MIPS32-BCM-BE-32bit-diab 
MIPS32-BCM-LE-32bit-diab 
MIPS32-IDT-BE-32bit-diab 
MIPS32-IDT-LE-32bit-diab 
MIPS32-PHI-BE-32bit-diab 
MIPS32-PHI-LE-32bit-diab 
MIPS32-PNX-BE-16bit-diab 


Debug mode (use debug mode flags) 


7. Scroll to the top and highlight PPC603diab. 


8. Select Debug mode (use debug mode flags) so Workbench will generate 
symbolic debug information. 


9. Click OK. 
10. Right-click on the project name and select Rebuild Project. 


Workbench builds the sample project. The results of the project build appear 
in the Build Console view. 


Error Log Tasks Problems Properties BQN: > iam ms |= Terminal Console 


/ J} eet 
& | @ i Gl 

con” ooNoIniyg FrCoosUIaD Wiss _OCUUSUate.. OF FUCe YY “AUSDUg*Owa;nre “tr Pr Cool. WiIniss “UO TOUC LT Aric T= “Oo TOU =ulee 
S_DEBUG/date.o" -c "date.c" a 
building PPC603diab-WISS_DEBUG/‘date.o 
echo “building PPC603diab-WISS_DEBUG/math.o";dec -g -Xdebug-dwarf2 -t~PPC603ES:windiss -DTOOL_FAMILY=diab -DTOOL=diat 
5_DEBUG/math.o" -c "math.c" 
building PPC603diab-WISS_DEBUG;‘math.o 
echo “building PPC603diab-WISS_DEBUG/addone.o";das -tPPC603ES:windiss -DTOOL_FAMILY=diab -DTOOL=diab -DPowerPC -DP 
building PPC603diab-WISS_DEBUG/addone.o 
echo "building PPC603diab-WISS_DEBUG/cdemo.elf"; did -o "PPC603diab-WI55_DEBUG/cdemo, elf" -t~PPC603ES:windiss cdemo-PO' 
S_DEBUG/cdemo.o PPC603diab-WI55_DEBUG/strutils.o PPC603diab-WI5S_DEBUG/engineer.o PPC603diab-WI55_DEBUG/calendar — 
ath.o PPC603diab-WISS_DEBUG/addone.o = iF [ "0" = "1" ]; then echo "building Run plink utility";plink PPC603diab-WI55_DEBUG) 
building PPC603diab-WISS_DEBUG/cdemo.elf = 
make: built targets of C:/WindRiver{workspace/c_demo_sa vi 


< il > 
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7.5.1 Downloading the Sample Code 


To run the sample code, use the following steps: 
1. Inthe Target Manager, highlight the target connection name. 


2. Inthe Project Navigator view, right-click on cdemo.elf and select Reset and 
Download. 


The Reset and Download view appears. 


% WRICE_WindRiver_SBCPowerQUICCII_8270 - U1 


Modify attributes and launch. w 


Name: | WRICE_WindRiver_SBCPowerQUICCII_8270 - U1 


Main Wed Reset @# Download @™ Instruction Pointer #* Run Options * Projects to Build 137 Source | [) Common 


Connection 


Create a New Target Connection 
~ | [Hide unconnected 
WRICE_WindRiver_SBCPowerQUICCII_8270 - WRICE_WindRiver_SBCPowerQUICCII_8270 is connec 


Core: im 


3. Leave all settings at their defaults and click Debug. 
The OCD Console view opens. 
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Error Log Tasks Problems Properties Build Console Terminal Console OCD Console X 


Testing JTAG Communication Passed 

Attempting to restore CPU context. Passed 
C:\WindRiver\workspace\c_demo_sa\PPC603diab-WISS_DEBUG\cdemo. elf COCO | 
Loading symbols... Completed at Default Offset (<1 sec) 


Specified not to Run 
* Reset and Download Completed * 


The OCD Console view shows the progress of the download operation, as 
Workbench downloads the sample code to the Wind River Instruction Set 
Simulator. 


7.6 Configuring Options for Multi-Core Debugging 


For multi-core debugging, the Reset and Download options will detect if the 
<TABLE_TIED_RESET> tag in the board file is set to ON; if it is, the Reset and 
Download options will issue RST commands (which affect all cores) rather than IN 
commands (which affect only one core.) You can use the JTAG Editor to set this 
option in your XML board file. 


In conjunction, there are two configuration options that you may want to change 
if you are debugging multiple devices on your target: HRESET and CMDRST. These 
must be set correctly for each core you are debugging. For explanations of these 
options, see CF HRESET, p.133, and CF CMDRST, p.133. 


To configure for multi-core debugging: 
1. Inthe Workbench toolbar, select File > Open > yourBoardFile. 


Figure 7-1 shows the example board file debug1.brd. Notice that the 
<TABLE_TIED_RESET> tag is set to OFF. 
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debug1.brd 
(aie PPC750FX: | iP otac Board Editor B boardfiles_debugi.brd x 
<DEVICE_TABLE> 


icy 


<TABLE_MODE>SLOW</ TABLE _MODE> 
<TABLE_CLOCK>16Mhz</TABLE_CLOCK> 
<TABLE_NULTI>ENABLE</ TABLE _MULTI> 
<TABLE_TIED_RESET>OFF</TABLE_TIED_RESET> 
<DEVICE> 


<NAME>PPC7?S50F X</NAME> 

<DESCRIPTION>IBM Power PC 750FX Processor</DESCRIPTION> 

<TYPE>NICROPROCESSOR</ TYPE> 

<TARGET>PPC7S0FX</ TARGET> 

<SELREG_FILE></SELREG_FILE> 

<DESIGNATOR>DES_7XX_04</DESIGNATOR> 

<IR_LEN>8</ IR_LEN> 

<ASF_FILE></ASF_FILE> 

<REG_FILES> 

</REG_FILES> 

<MNENORY_MAP> 
<MEMORY_MODE>DEF AULT</ NEMORY_MODE> 

</MENORY_MAP> 


</DEVICE> 
<DEVICE> 


<NAME>PPC7S50F X</NAME> 
<DESCRIPTION>IBM Power PC 7S50FX Processor</DESCRIPTION> 
<TYPE>MICROPROCESSOR</ TYPE> 
<TARGET>PPC7SOF X</ TARGET> 
<SELREG_FILE></SELREG_FILE> 
<DESIGNATOR>DES_7XX_05</DESIGNATOR> 
<IR_LEN>8</ IR_LEN> 
<ASF_FILE></ASF_FILE> 
<REG_FILES> 
</REG_FILES> 
<MEMORY_MAP> 

<MEMORY_MODE>DEF AULT</ MEMORY_MODE> 
</MEMORY_MAP> 


</DEVICE> 
</DEVICE_TABLE> 


- 


Or. es 4 


Right-click on your board file and select Save. 


HRESET. 


6. Double-click on the value under the Current Setting heading to bring up a list 
of parameters. Set the option to ENABLE or DISABLE, depending on your 


application (see CF HRESET, p.133.) 


7. Under the Command Name heading in the CF Options view, scroll down to 


CMDRST. 
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Edit your board file to set <TABLE_TIED_RESET> to ON. 


In the Workbench toolbar, select Window > Show View > CF Options. 


Under the Command Name heading in the CF Options view, scroll down to 


CF HRESET 


CF CMDRST 
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8. Double-click on the value under the Current Setting heading to bring up a list 
of parameters. Set the option to ENABLE or DISABLE, depending on your 
application (see CF CMDRST, p.133.) 


9. Repeat Steps 5 through 8 for each core you are debugging. 


If HRESET is set to ENABLE, then every time an IN command is issued the 
HRESET line will be pulled. Because the HRESET line is a physical line that is 
accessed through a single OCD connector on your target, all of the devices on your 
scan chain will be reset when an IN command is issued. 


In the example described previously, in which there is a target with two processors 
(A and B), consider the case where Processor A is running correctly and you want 
to initialize Processor B. If the CF HRESET option is set to ENABLE and you issue 
an IN command in the view of Wind River Workbench pertaining to Processor B, 
both processors are reset, even though Processor A was already running correctly, 
because the HRESET line on your target runs through both processors. 


If you set the CF HRESET option to DISABLE, the HRESET line will not be pulled 
when an IN command is issued. In the case described above, where Processor A is 
running correctly, if the CF HRESET option is disabled and you issue an IN 
command on Processor B, the HRESET line will not be pulled, and only Processor 
B is reset. Processor A remains running correctly without interruption. 


This option controls the HRESET line into the target, and it affects the RST 
command. The RST command simply issues an IN command to all devices in your 
scan chain simultaneously. If this option is set to ENABLE then the HRESET line is 
pulled when an RST command is issued. If you DISABLE this option, then all of 
the devices on the scan chain are synchronized, and the HRESET line will not be 
pulled. With the RST command, all of the devices are reset anyway, so choosing to 
enable or disable the CMDRST depends on the hardware on your target. 


Be aware of these two CF options, and make sure you have set them correctly for 
your system before you begin debugging. Failure to do so could cause you to 
accidentally reset a device that was already running correctly. 
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NOTE: Make sure you set the CF options correctly in each instance of Wind River 
Workbench that you have running. In the example used above, if you had set the 
options correctly for Processor A but had not set them in Processor B, working in 
the instance of Wind River Workbench pertaining to Processor B could cause you 
to reset a device unintentionally. 


7.7 Commands for Multi-Core Debugging 


When you are working with multiple devices in your scan chain simultaneously, 
any one device can be controlled and manipulated by going to the view of 

Wind River Workbench pertaining to that device and working with it as you 
would a single core target. 


There are a few commands available that allow you to control all of the devices on 
your scan chain simultaneously. For a guide to all low-level commands, see the 
Wind River Workbench On-Chip Debugging Command Reference. 


RST and RSTINN 


The RST command is a way to issue an IN command to every device on your scan 
chain simultaneously. It behaves in an identical fashion to the IN command, in that 
it attempts to initialize Background Mode communications for each device and it 
transfers the chip-select table and any stored register settings to your target via the 
OCD link. 


Similarly, the RSTINN command is a way to issue an INN command to every 
device on your scan chain simultaneously. As with the INN command, the RSTINN 
command merely places every device on your scan chain into background mode 
without affecting your target’s register or chip select settings. 


When you issue an RST or RSTINN command in one view of Wind River 
Workbench, a message appears in the other views that a synchronous reset is in 
progress. 


GO ALL and HALT ALL 


These are two additional commands that can be used to affect all of the devices on 
your scan chain simultaneously. To use these commands, first download code to 
your target in each of the perspectives of Wind River Workbench. The demo 
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programs provided may be used for this purpose; for information on downloading 
code to your target please see the Wind River Workbench User’s Guide. 


Once code is successfully downloaded to each device, the GO ALL command can 
be issued from any of the instances of Wind River Workbench that you have open. 
All of the code is started running on each of your devices simultaneously. Similarly, 
the HALT ALL command stops the code running on all your devices at once. 


NOTE: If you start all the devices running simultaneously, and then use the 
standard HA command to stop one of the devices, the other devices will continue 
to run. 
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8.1 Introduction 


Regardless of how you plan to initialize and configure your system, you must 
program and configure the internal registers on your target at least to the point 
where you are able to download any boot and application code. 


This is done in two steps: first, configure register settings in the emulator’s 
non-volatile RAM (NVRAM); second, copy the register settings from the emulator 
to the target. 


Your emulator includes an area of NVRAM where you can store register settings 
for a target. Once you store register settings in NVRAM, you can load the register 
settings to and from the target. 


137 


Wind River Workbench for On-Chip Debugging 
User Tutorials, 2.6.1 


Once the register values are present in NVRAM, the emulator automatically loads 
them to the target after each cold start, warm start, or target IN initialization 
command. To select which register values are written to the target, enable or 
disable the appropriate register groups. 


Wind River emulators use low-level commands to configure register settings. 
These low-level commands are stored ina script called a register file, a text file with 
the extension *.reg. 


If your target already has register values set and configured, you can upload these 
values to the emulator NVRAM. From there, you can save the register settings to a 
register file and store it on your host computer for use on other targets. 


You can work with registers for your target using a Wind River Probe or a 
Wind River ICE SX with Wind River Workbench, or by using low-level commands 
in the OCD Command Shell in Workbench. 


8.2 Downloading a Register File 
Wind River supplies register files for Wind River evaluation boards, as well as for 
many third-party target boards. 


All Wind River hardware reference designs are shipped with a register file that you 
can use to initialize the target registers, so that code can be downloaded to the 
board. To use a register file to initialize your target registers, you must first 
download the file to the emulator NVRAM, then from the NVRAM to the target. 


To download a register file, use the following steps. 


1. Inthe Workbench toolbar, select 
Window > Show View > OCD Command Shell. 


2. Inthe OCD Command Shell, click Playback File. 
The OCD Command Shell Settings dialog appears. 
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% OCD Command Shell Settings 


OCD Command Shell Settings 


MPC8540 | 


PlayBack File v Display Background Communications 


Input Log File v (Append 
Full Log File v (J) Append 


3. Next to the PlayBack File field, click Browse. 
4. Navigate to the register file you wish to use and click Open. 


Register files for Wind River hardware reference designs are located in 
installDir'workbench-2.x/dfw/build/host/registers. 


5. Click OK. 
6. Inthe OCD Command Shell, click the Playback File icon again. 


Workbench downloads the register values from the register file you selected to 
your emulator NVRAM. 


7. Inthe OCD Command Shell, enter the command IN. 


The emulator initializes the target and copies the register values from its 
NVRAM down to the target. 


8.3 Saving Register Settings from a Target 


If you are working with a target that already has its registers correctly initialized, 
you can upload those register settings to a file and save them on your host 
computer. 


It is useful to save register settings to a file if you have received a target with 
registers already initialized, or if you have manually programmed registers on 
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your target one by one and wish to use those settings again on another target. After 
you save the settings to a register file, you can download the settings to a new 
target. 


To save the register settings from a target, complete the following steps: 
1. Select Window > Show View > Registers. 


The Registers view appears. 


Local Variables | Watch (Ef:|/EEnmeeaieed 


ee & a ~ 


Name Description ws 
+) GPR 
+] EVREG 
ey CTRL 
+) pyr Oxo0000000 Processor Version Register — 
+) pir oxoo000000 Processor ID Register 
dec oxo0000000 
decar Oxoo000000 
tbu oxo0000000 
tbl oxo0000000 
+) ter oxoo0000000 Timer Control Register 
+) tsr oxo0000000 Timer Status Register 
+ hido oxooo00000 Hardware Implementation- 
+) hid1 oxooo00000 Hardware Implementation- 
+) licsrO Oxo0000000 L1 Cache Control and Stat 
+ licsrt oxo0000000 L1 Cache Control and Stati 
+) licfgO oxoo000000 Li Cache Configuration Re 
+ licfgi oxooo00000 L1 Cache Configuration Re 
acc oxoo000000 
csrrO oxo0000000 
esrrd oxo0000000 
mesrrO oxoo000000 


2. Right-click in the Registers view and select Save Target Register Values to 
File. 


The Save Target Registers dialog appears. 
3. Click Save. 
Use the browser window that appears to specify a file. Workbench saves the 
file in the location you specify with the extension *.reg. 
Saving Register Settings Using Low-level Commands 


Alternatively, you can save the register values using low-level commands in the 
OCD Command Shell. 


First, copy the register settings to the emulator configuration file from the target 
using the low level command SCT COPY. 
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NOTE: Only registers in enabled register groups are copied up from the target 
during an SCT COPY operation. 


Next, copy the register settings from the emulator to a register file. 


NOTE: Although you could just copy the register settings to the emulator 
configuration file and not create a register file, Wind River recommends that you 
create one anyway. If you change targets, or if the emulator configuration file were 
to get corrupted or overwritten, a register file is the easiest way to fix it. 


Upload register settings from the emulator to a file using the PJ UPLOAD 
command as described in the Wind River Workbench On-Chip Debugging Command 
Reference. 


8.4 Enabling and Disabling Register Groups 


Workbench stores registers in logical register groups. You can enable or disable any 
register group using the Registers view. 


When you initialize your target using the INcommand, the register values that are 
stored by the emulator are copied down to the target. However, the emulator only 
copies the register settings for the register groups that are enabled. Register groups 
that are disabled on your target do not have register data transferred. Disabling a 
register group enables you to view the target register value, but prevents it from 
being overwritten during target initialization. 


NOTE: If you change a register value directly on the target of a register group that 
is disabled, that register does not get overwritten by the emulator during an 
initialization. Note, however, that the processor may still reset that register value 
to the processor default during a target initialization. 


The following steps describe how to enable or disable a register group on your 
target. 


1. In the Workbench toolbar, select Window > Show View > Registers. 
2. Right-click in the Registers view and select Show Emulator Settings. 
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The Registers view now shows a check box next to each register group, under 
the heading Enabled. 


Local Variables | Watch (EF=I-tnercTraiae 


& eR GY 


Name Enabled Emulate “ 

+ INTERRUPT 

+ PMON 
SPEF 

+ LA 

+ ECM 

+ LBC 

+ 12C 

+) DUART 

+ DDRMC 

+ TA 

+ PCI 

+ L25RAM 

+ DMA 

+ TSEC 

+ EC 

+ PIC 

+ UPMA, 

+ UPMB 

+ UPMC 

+ RIO 

+) GLOBU 

< 


= OQOOOOOOOONOROONO8 


3. Select or clear the box next to any register group to enable or disable that 
group. 


Enabling and Disabling Register Groups with Low-Level Commands 
You can also enable and disable register groups with the command CF GRP in the 
OCD Command Shell in Workbench. 
To use the CF GRP command, use the following steps. 


1. Inthe Workbench toolbar, select Window > Show View > OCD Command 
Shell. 


2. At the >BKM> prompt, type the command CF GRP. 
The first register group appears, as shown below: 


>BKM>c£ grp 
Group (CF GRP (M/S) Name = ENABLED/DISABLED 
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CUSTOM (O0=Disable 1=Enable) Enabled > 


The name of the register group is displayed, along with its current status 
(either ENABLED or DISABLED). 


Type 0 to disable the group or 1 to enable it. 


4. To leave the setting as it is and advance to the next register group, press the 
ENTER key without typing 0 or 1. 


5. Continue through the list of register groups enabling and disabling them as 
required. 


6. When you have enabled or disabled all groups, type CF UPLOAD GROUP at 
the >BKM> prompt. 


This displays a list of all of the register groups on your target with their current 


settings. 

>BKM>cf£ upload group 

CF GRP GT64260_CPU ENABLED ; GROUP 
CF GRP GT64260_SDRAM ENABLED ; GROUP 
CF GRP GT64260_DEVICE ENABLED ; GROUP 
CF GRP GT64260_GPP ENABLED ; GROUP 
CF GRP GT64260_MPP ENABLED ; GROUP 
>BKM> 


8.5 Configuring Registers Manually 


If you are using a target for which Wind River does not supply a register file, you 
may have to modify an existing one (see Modifying an Existing Register File, p.154); 
or, if your target has default register settings, you may modify them manually. 


Remember that the register file sets the register values in the emulator NVRAM, 
not on the target. The emulator copies the values you set in its NVRAM down to 
the target when you initialize the target with an IN command. Without a register 
file, the NVRAM contains default register values, typically made for a Wind River 
evaluation board, which most likely are not suitable for your target. So the IN 
command will not set the target registers properly. 


Some target processors, for instance most PowerPC targets, come with default 
register settings. If your target has default register settings, you can modify the 
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registers directly on your on your target manually, at least to the point where you 
can download your boot ROM application code. 


Remember that if you modify your registers manually, an IN command or target 
reset will overwrite your changes. 


To modify registers manually, use the Registers view in Workbench. The Registers 
view lets you view the bit-level detail for each register. The following sections 
describe the Registers view and the bit-level detail provided. 


The Registers View 


Figure 8-1 


When the Registers view is open in Workbench, all of the register groups for your 
target are displayed with + signs beside them. Clicking on a + sign expands the 
register group, showing all of the registers that are included in that register group 
along with the value that they are currently set to. An example of an expanded 
register group is shown in Figure 8-1. 


Expanded Register Group 


Local Yariables Watch 3B resisters x 


Name Value Description 


+) GPR 
+) EYREG 
= 
+ pyr oxo0000000 Processor Version Register — 
+) pir oxo0000000 Processor ID Register 
dec ox00000000 
decar oxo0000000 
tbu oxo0000000 
tbl ox00000000 
+) ter oxo0000000 Timer Control Register 
+) tsr Ooxo0000000 Timer Status Register 
+) hidO ox00000000 Hardware Implementation- 
+| hid1 ox00000000 Hardware Implementation- 
+) licsrO oxo0000000 Li Cache Control and Stati 
+) licsr1 oxo0000000 Li Cache Control and Stati 
+ licfgO ox00000000 L1 Cache Configuration Re 
+ licfgl oxo0000000 L1 Cache Configuration Re 
acc Ooxo0000000 
csrrO O0x00000000 
cstrl o0x00000000 
mesrrO ox00000000 
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NOTE: Figure 8-1 is only an example of an expanded register group. The groups 
and the register values vary widely depending on your target architecture. 


Bit-Level Detail 


You can view the bit-level detail for any register by clicking on the + sign beside 
the register in the register group. 


NOTE: Before you can make any changes to your register settings, you need to 

enable the register group that contains the register you want to modify, so that the 

values download to the target when you initialize your system. If you do not 

enable the register group, you can still modify the settings in the emulator but not Ei 
on the target. For more information, see 8.4 Enabling and Disabling Register Groups, 

p.141. 


You can make changes to any of the register settings by modifying each of the 
bit-level settings for any register. 


To modify bit-level values for your target, complete the following steps: 
1. Inthe Registers view, double-click on the name of the register you wish to edit. 


Figure 8-2 shows the Registers view with the TBU register selected. 
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Figure 8-2 Selecting a Register 


‘Local Variables ‘watch (EF: Registers X 


Name Description 


[+ GPR 
(+ EVREG 
| CTRL 
+) pyr ox00000000 Processor Version Register — | 
+) pir oxo0000000 Processor ID Register 
dec ox00000000 
decar oxoo000000 


tbl oxo0000000 
(+| ter oxo0000000 Timer Control Register 
[+] tsr Oxo0000000 Timer Status Register 
(+ hido oxo0000000 Hardware Implementation- 
(+) hid1 ox00000000 Hardware Implementation- 
#4) licsrO oxoo000000 Li Cache Control and Stati 
#4 licsrd oxoo000000 L1 Cache Control and Stati 
+ licFgO oxoo000000 L1 Cache Configuration Re 
+ licFgt ox00000000 L1 Cache Configuration Re 

acc Oxo00000000 

csrrO oxo00000000 

cstr Oxo00000000 

mesrrO Ox00000000 

Ju 


This opens the Properties view, which shows the name of the register you have 
selected under the Property heading and its current setting under the Value 
heading, as shown in Figure 8-3. 


Figure 8-3 Properties View 


Tasks Problems % Properties X 


Property 


tbu bin 


tbu dec 
tbu oct 
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2. Select the value under the Value heading and edit it as necessary. 


3. Inthe Registers view, click the Refresh Values button. The register 
information reappears with your changes. 


NOTE: Some registers are write-protected and cannot be edited. 


8.6 Working With Custom Register Groups | a 
You can create custom register groups to perform various tasks, such as initializing 
peripheral memory. 


This section presents two scenarios to describe how to add custom registers or 
register groups to your target, depending on what you want to do: 


« Creating a new set of registers for your target 


«Modifying an existing register file 


Creating a New Set of Registers 


To create new registers using the Registers view, complete the following steps: 


1. Right-click in the Registers view and select Define Memory Mapped 
Register... 


The Define Register dialog appears, as shown in Figure 8-4. 
NOTE: Only memory mapped registers can be created with this dialog. To 


create a non-memory mapped register, see Creating New Registers With 
Low-Level Commands, p.149. 
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Figure 8-4 Define Register Dialog 


W Define Memory Mapped Register... 


Register Group: CLOCKS 


Register Name: | SCCR 


Address: | OxFFFFOOOO 
Data: | 4104 


Read/Write 
© irw Read/Write 


Or Read Only 
Olw Write Only 


Size 

O automatic determine from default data size 
© [52:8 Byte (8 bits) 

Ojse:w Word (16 bits) 

Ofsat Long (32 bits) 

Ojfsz:D Double (64 bits) 


Options 
[J flendian little endian register (if CPU support available} 
[J ino_in do not set on target during emulator IN sequence 


(extra 


| SCGA CLOCKS SCCR OxFFFFOO0O 4104 {mer frw /52:B 


2. Inthe dialog text fields, specify the details of your new register as follows: 


« Inthe Register Group field, specify the register group to which the new 
register will be added. 


* Inthe Register Name field, specify the name of the new register. 


148 


8 Configuring Target Registers 
8.6 Working With Custom Register Groups 


» Inthe Address field, specify the address at which the new register will be 
located. 


« In the Data field, specify the data to be stored in the new register. 


The example in Figure 8-4 shows a new register called SCCR that will be 
placed in the register group CLOCKS, located at address 0xFFFF0000, and has 
the value 4104. 


3. Set the following options: 
* Set the register to be read/write, read-only, or write-only. 
« Set the register to store data as Byte, Word, Long, or Double. 


* Set the register as little-endian. (This only applies if your target CPU is able 
to switch between big-endian and little-endian modes.) 


« Specify whether the register will be set on the target during an 
initialization sequence. 


The example in Figure 8-4 shows the register set to read/write and size B 
(byte). 


There are advanced options not available from the Define Register dialog; 
these options must be set using low-level commands in the OCD Command 
Shell. For information about these options, see SCGA Options, p.151. 


4. Click OK to create the register. 


Creating New Registers With Low-Level Commands 


To create a new set of custom registers for your target, create an ASCII text file with 
the extension *.reg. Then load that file to your emulator and the target, thus setting 
up register groups as required for your system. 


Prior to creating your own register file, look at one of the default register groups 
that was included with your Wind River Workbench software to learn more about 
ho w register files are laid out. The following is an example of a register file: 


SC GRP ERASE 


SCGA GEN SCR FFB00000 4006A300 /r 
SCGA GEN SSR FFB00004 0A80042F 

SCGA GEN PLLCR FFB00008 06000000 

SCGA GEN SOFTSR FFBO0000C 00000000 /no_in 


SCGA MPC107_PCI VENDOR 00000000 1057 /r(nwf) /w(nwf) /r /ua:1 /lendian 
SCGA MPC107_PCI ADDR_00 00000000 80000000 /wo /hide /w /ua:0 /lendian 
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SCGA MPC107_PCI ID 00000002 0004 /v(nwf£) /w(nwf) /r /ua:1 /lendian 
SCGA MPC107_PCI ADDR_02 00000000 980000002 /wo /hide /w /ua:0 /lendian 
SCGA MPC107_PCI PCICMD 00000000 0004 /xc(nwf) /w(nw£) /ua:1 /lendian 


SCGA MPC107_PCI ADDR_04 00000000 80000004 /wo /hide /w /ua:0 /lendian 


The register file you create for your target depends entirely on the information that 
you need to set up for your system, so your file may look similar to the default 
register groups or it may look completely different. The list below describes some 
of the items that you must include in your file. 
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Include the line SC GRP ERASE 


Include the line SC GRP ERASE in your register file to erase any existing 
register groups and settings that might be set up by default on your target or 
in the emulator file. Since you are creating an entirely new register set for your 
target, you need to make sure that any residual information on the target or in 
the emulator is removed prior to adding new information. 


Include any configuration options 


Use CF commands to include any configuration options required for your 
target. Always include a CF TAR target_processor configuration line in this 
section to make sure that your register file matches the target that you are 
working with. target_processor must match the processor you selected when 
you made your connection to the emulator. 


Including this line also makes it clear to anyone else who plans to use your 
register file which target your file is intended for. Include this line, and any 
other configuration options that are required for your target, in your register 
file. For more information on the available configuration options for your 
architecture, and for syntax information, see the Wind River Workbench for 
On-Chip Debugging Configuration Options Reference. 


Set up register groups for your target 


New registers and register groups are created using SCGA commands. The 
syntax for adding a new register in a register group is: 


scGA GroupName RegisterName Address Data Options 


This command adds the register RegisterName to the register group 
GroupName. 


GroupName — This is the name of the existing register group that the new 
register is added to. 


RegisterName — This is the name of the register that you are creating. 
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Address — This is the address where the new register is located. 
Data — This is the data that is stored in the register you are creating. 


Options — There are many options associated with the SCGA command. 
These are described in SCGA Options, p.151. 


Continue adding all of the new registers for your target. When you finish adding 
the required registers, save the file with the extension*.reg. 


You are now finished creating a register file for your target. You can download the 
file to the emulator and your target as described in 8.2 Downloading a Register File, 
p- 138. When you have downloaded the file and issued an IN command, all of the 
new register settings become visible in the Registers view in Workbench. 


SCGA Options 


/cpur 
This option specifies that the register you are creating is a CPU core register (that 
is, SPR, or other non-memory-mapped register.) 
Example: 
SCGA SIM_MMU SIM_IBATOL 4014 00000004 /cpur 
This example creates a new register group called SIM_MMU, with a core register 


called SIM_IBATOL embedded in it. 


NOTE: Newly created groups are disabled by default. To enable the register group, 
see 8.4 Enabling and Disabling Register Groups, p.141. 


/hide 
This option specifies that the register will not be visible when an SC or DR 
command is issued. It will only be visible when an SC UPLOAD or SCG UPLOAD 
command is issued. 

/endian 


This option specifies that the register you are creating is little-endian. This option 
only applies if your target CPU can switch between little-endian and big-endian 
modes. 
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/memr 
This option specifies that the register you are creating is a memory-mapped 
register. This is the default for all self-defined registers and all registers created in 
the Define Register dialog. 

/no_in 
This option specifies that the register you are creating will not be set on the target 
during an IN initialization sequence. 

/r, /w, /rw 


These options are read-only, write-only, and read/write flags. Registers are set to 
/rw by default. 


/Sz:B, /Sz:W, /Sz:L, /Sz:D 


These options force the size of the register to either Byte (8 bits), Word (16 bits), 
Long (32 bits), or Double (64 bits).The default register size is determined by the 
amount of characters used to specify the default value. (In the Define Register 
dialog this is the value you enter in the Data field.) 


/va_dr 


This option is used on anchor registers to make them available on a DR command. 
(For PowerPC, on an IMMR command.) 


This option defines a fixed-value register. A register created with this option will 
not be affected by an SCT COPY command. 


/w(nwf) 


This option specifies a write cycle (next write first.) It indicates that in order to 
write a value to this register, you first need to write the following register value to 
the target. 


Example: 


SCGA MPC_PCI PCICMD 80000CFC 0600 /w(nwf) /r(nwf) 
SCGA MPC_PCI ADDR_04 80000CF8 04000080 /wo /hide 


In this example, you create a register called PCICMD in the register group 
MPC_PCI. The option specifies that the register PCICMD cannot be written to 
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unless a write to the register ADDR_04, in the same register group, is performed 
first. 


/r(nwf) 


Similar to the /w(nwf) option, this option specifies a read cycle (next write first.) It 
indicates that in order to read a register, you first need to write the following 
register value to the target. 


/w(nwa) 


This option specifies a write cycle (next write after.) It indicates that if you write a 
value to this register, you need to write the next register value to the target 
afterwards. 


For more information on the SCGA and SCGD commands and their options, see 
the Wind River Workbench for On-Chip Debugging Command Reference. 


Using Your New Register File 


The register file you created is designed to erase all of your register groups and 
recreate them every time you play back the file. Since all of the settings are stored 
in the emulator file, it is likely that you will not have to play back the register file 
very frequently, and therefore having the file configured to erase all of the settings 
each time is acceptable in most cases. 


If you prefer that your register settings are not erased and recreated each time you 
play back the file, complete the following steps: 


1. Create your register file as described in the steps above using SCGA 
commands. 


2. Play back that file once, to make sure all of the required register groups are 
created in the emulator and on your target. 


3. Next, remove the SC GRP ERASE line from your file, which prevents all of the 
groups from being erased each time the file is loaded. 


4. Change all of the SCGA commands to SC commands. 
For example, a line such as: 
SCGA SYSMGR SYSCFG 03FF0000 87FFFFAO 
would be changed to: 


SC SYSCFG 87FFFFAO 
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Note that the syntax for the SC commands is different than for the SCGA 
commands. See the Wind River Workbench for On-Chip Debugging Command 
Reference for more information. The syntax is different because SCGA commands 
are used to create new registers, whereas SC commands are used to change the 
values of existing registers. Using SCGA commands for registers that already exist 
results in a syntax error. Using SC commands for registers that do not exist also 
results in a syntax error. 


After you replace all of the SCGA commands with SC commands, playing back the 
register file only updates the registers that already exist on your target and does 
not erase anything. 


Modifying an Existing Register File 


If you have a register file that you are satisfied with, but you want to add some 
additional groups of registers to it, it is easiest to modify your existing register file 
rather than create an entirely new one. 


You can either add registers to an existing group or add a new group of registers 


to an existing file. 


Adding Registers to an Existing Register Group 


To add registers to an existing register group, open the register file you want to 
modify in a text editor and erase the existing group using the SC GRP ERASE 
GroupName command. Then add back all of the registers that were previously 
included in that group, as well as any new ones you want to add, using the syntax 
shown below: 


SCGA GroupName RegisterName Address Data Options. . . 


GroupName — The name of the existing register group that the new register is 
added to. 


RegisterName — The name of the register that you are creating. 
Address — The address where the new register is located. 
Data — The data that is stored in the register you are creating. 


Options — There are many options associated with the SCGA command. A full 
description of all of the available options is available in the Wind River Workbench 
for On-Chip Debugging Command Reference. 
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Adding a New Group of Registers to an Existing File 


To add a new group of registers to an existing file, open the register file you want 
to modify in a text editor and include the command SC GRP ERASE GroupName. 
Then add each of the registers to be included in the group using the following 
syntax: 


SCGA GroupName RegisterName Address Data Options... 


GroupName — The name of the existing register group that the new register is 
added to. 


RegisterName — The name of the register that you are creating. 
Address — The address where the new register is located. 
Data — The data that is stored in the register you are creating. 


Options — There are many options associated with the SCGA command. A full 
description of all of the available options is available in the Wind River Workbench 
On-Chip Debugging Command Reference. 


As described in Creating a New Set of Registers, p.147, you can change your register 
file after you play it back the first time so that the register groups that you have 
added or made changes to are not erased each time you play back the register file. 
To do this, first make sure that you play back the register file once to create the 
register groups in the emulator and on the target. Then open your register file and 
remove the SC GRP ERASE GroupName line from the file and everywhere that you 
have included SCGA commands, replace them with SC commands using the 
syntax described in the Wind River Workbench for On-Chip Debugging Command 
Reference. Doing this updates the registers every time you play back the register file 
instead of deleting and recreating them. 


8.7 System Configuration (SC) Commands 


The SC commands allow you to edit any of the internal peripheral registers for 
your target processor. They allow you to modify non-volatile values and store 
them in your host computer. The values are loaded into the emulator file and 
downloaded to your target any time it is initialized. The SC commands also let you 
view and edit any of the current target values. 
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For information on all of the available SC commands, see the Wind River Workbench 
for On-Chip Debugging Command Reference. 


156 


Programming Flash Memory 
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9.4 Configuring Registers 164 

9.5 Using the Flash Programmer View 165 
9.6 Flash Configuration Tab 166 

9.7. Flash Programming Tab 168 

9.8 Flash Memory/Diagnostics Tab 174 


9.1 Introduction 


The Flash Programmer view provides the ability to flash images into flash chips 
present on your target board. 


To program flash correctly you need to know the physical characteristics of your 
flash bank. For instance, your board may have one flash device connected to a 
64-bit bus. Or it may have a bank of several flash devices, for example two flash 
devices, each wired at 16 bits, connected along a 32-bit bus. 
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If you are using a Wind River-supported board, this information can be found in 
the file installDir/vxworks-6.x/target/config/your Target Board/target.ref. 


If you are not using a Wind River-supported target, consult your target’s 
documentation. The design primitives of your target board should be included in 
its board specification and schematics. 


To program target flash, you must create an active target connection and configure 
your target registers. 


9.2 Connecting to a Target 


This tutorial uses a Wind River Probe emulator connected to a Wind River 
PPMC750FX target. 


To connect to your target, use the following steps: 


1. Launch Wind River Workbench according to the method for your host. 


Linux/Solaris Hosts 


From your installation directory, issue the command 


$ ./startWorkbench.sh 


Windows Hosts 
Select Start > All Programs > Wind River > Wind River Workbench version. 


On Windows hosts, Workbench prompts you to specify a workspace location. 
Linux/Solaris hosts use the default location installDir/workspace. 


When Workbench opens, he Quick Target Launch dialog appears. 
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Wind River On Chip Debugging 
@ Choose How You Want to Start 


Defined Launches 


Create a new launch configuration 


Edit an existing launch configuration 


Connect, Attach, Reset and Download 


Sync with target and download symbols: 


Do nat show this dialog on startup. 


2. Select Create anew launch Configuration. 


The Connection Type dialog appears. 


W New Connection 


Connection Type 


Please select connection type. 


Wind River OCD ICE Connection 

Wind River OCD 155 Connection 

Wind River OCD Probe Connection = 
Wind River VxWorks 6.x Core Dump Connection 

Wind River VxWorks 6.x Simulator Connection 

Wind River ¥xWorks 6.x Target Server Connection 


Cancel 


3. Select Wind River OCD Probe Connection and click Next. 
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The Processor Selection dialog appears. 


“W) New Connection 


Wind River Probe Settings 


Configure the designator settings for the emulator. 


Designators 


@Processor: | PPC750F% 


O Board file: Browse 


¥  Designator Processor Processor Plugin 
| PPC?SOFX PPC?SOFX PowerPC 7xx Family Process... 


Auto-attach to connected designators 


Communications 


USB Device Name; | PRO40310 


4. Click Select. From the list that appears, expand MPC7xx and select PPC750FX. 
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“) Processor Selection 


Current Connection - Wind River Probe : PPC750F 


) MPC6xx 

+) MPC#4xx 

) MPCFxx 
MPC?740 
MPC?45 
MPC?7S0 
MPC?SS 
PPC740 
PPC745 
PPC?7S0 
PPC7SOCK 
PPC7SOCXE 
PPC7SOCKR 
PPC?SOGX 
ppr7sni 


v 


5. Make sure the Auto-attach to connected designators checkbox is selected and 
click OK. 


You are returned to the Processor Selection dialog. 
6. Click Next. 


7. The connection wizard passes through a number of screens that you do not 
need to configure for this tutorial. Leave all settings at their defaults and click 
Next until you come to the Connection Summary. 
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W) New Connection 


Connection Summary 


Please review the connection information 


Connection name: | WRProbe_PPC7SOFX_0 


Summary 


Property Value 
ADDR PRO40310 
AutoAttachConnectedCon true 

+ DESIGNATORMAP 
DEVICE Wind River Probe 
NAME_MAPPING [*;*.unstripped],[*;*] 
PATH_MAPPING (Jd 
STYLE USBDEVICE 


£ 


Immediately connect to target if possible 


8. Make sure that the Immediately connect to target if possible checkbox is 
selected and click Finish. 


Workbench creates a target connection called WRProbe_PPC750FX in the 
Target Manager view and opens the Reset and Download view. 


You do not need to download code to program flash memory, so click Close to 
close the Reset and Download view. 
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9.3 Testing Flash Workspace 


The flash programming algorithm needs to run on the target. This requires a RAM 
workspace, to which the algorithm will download, and breakpoints, which are 
used to stop an erase and program operation at completion. 


Reading and Writing Memory 


Once you have established communications with the target, use the following 
procedure to make sure you can write to and read from the target. In this example 
we assume that the RAM workspace is 0x00F00200. 


NOTE: A RAM workspace address of 0x00F00200 is not appropriate for all targets. 
For Wind River-supported targets, you can find the necessary RAM workspace in 
your target’s target.ref file, located in 
installDir/vxworks-6.x/target/config/yourTarget/target.ref. 


Wherever the RAM workspace is located on your target, you must make sure that 
memory is writable there. 


At the >BKM> prompt, enter dm 00F00200 and press ENTER. Doing so displays the 
memory on your target at address 0. 


Next, enter sm 00F00200 1234 and press ENTER to set the memory at address 0 to 
the value 1234. Enter dm 00F00200 to display the memory at that address again. 


If you are communicating properly with your target, output is similar to that 
shown below: 


>BKM>dm 00£00200 

OOFO00200: FF7C EFFE FEFF E3FE 0D01 OFBE FOFD BFB6 2) ae aheis ac srsas aaa oi sete 
>BKM>sm 00£00200 1234 
>BKM>dm 00£00200 

OOFO0200: 1234 EFFE FEFF E3FE O0D01 OFBE FOFD BFB6 .4............. 
>BKM> 


Occasionally, you may have difficulty programming flash memory on your target 
if software breakpoints are not being hit properly. Test this functionality before you 
continue. 


To use the test, enter the following commands at the >BKM> prompt in the OCD 
Command Shell: 


>BKM>df e 0 


>BKM>di 0 6 
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$00000000 : 0x60000000 :ppc nop 
$00000004 : 0x60000000 :ppc nop 
$00000008 : 0x60000000 :ppc nop 
$0000000C : 0x60000000 :ppc nop 
$00000010 : Ox7COOO04AC :ppc sync 
$00000014 : Ox4BFFFFFO :ppc b 0x4 
>BKM>go 0 
>RUN>dr pe 
PC = 00000004 
>RUN>dr pe 
PC = 00000010 
>RUN>sb 8 
>RUN> 
!BREAK! - [msg12000] Software breakpoint; PC = 0x00000008 [EVENT Taken] 
>BKM> 
>BKM>rb 
>BKM> 


9.4 Configuring Registers 


Before you can program target flash, you must configure your target registers. This 
is done in two steps: first, configure register settings in the emulator’s non-volatile 
RAM (NVRAM); second, copy the register settings from the emulator to the target 
by issuing an IN initialization command. 


Wind River emulators use low-level SCGA commands to configure register 
settings. These low-level commands are stored ina script called a register file, a text 
file with the extension *.reg. Register files for Wind River hardware reference 
designs are located in installDir'workbench-2.x/dfw/build/host/registers. 


To configure target registers for a Wind River PPMC750FX, use the following steps: 


1. Inthe Workbench toolbar, select Window > Show View > OCD Command 
Shell. 


2. Inthe OCD Command Shell, select Settings. 
The OCD Command Shell Settings dialog appears. 
Next to the PlayBack File field, click Browse. 

4. Navigate to the file you wish to use and click Open. 
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The register file for the Wind River PPMC750FX is ppmc750fx.reg, located in 
the folder WindRiver_PPMC in the directory 
installDirlworkbench-2.x/dfw/build/host/registers/PowerPC/7xx. 


5. Click OK. 
You are returned to the OCD Command Shell. 
6. Click Playback File. 
Workbench plays the register file and configures the emulator NVRAM. 
7. At the >BKM> prompt in the OCD Command Shell, enter the command IN. 


Workbench initializes the target and configures the target registers with the 
values from the emulator NVRAM. 


You have now configured the target registers. For more information on registers, 
see 8. Configuring Target Registers. 


9.5 Using the Flash Programmer View 
Once you have connected to Wind River Workbench, and configured your target 
registers, you are ready to begin programming flash. 
In the Workbench toolbar, select Window > Show View > Flash Programmer. 
The Flash Programmer view appears. 


The Flash Programmer view has three tabs: Configuration, Programming, and 
Memory/Diagnostics. Use these tabs to configure your flash address and RAM 
workspace, choose files for download, execute erase and program operations, and 
check the results of your operations. 
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9.6 Flash Configuration Tab 


Wind River Workbench for On-Chip Debugging 


Use the Configuration tab to configure the base address and workspace address 
for flash memory erase operations. You can also enter the physical description of 


your flash devices. 


Figure 9-1 Configuration Tab 


Error Log| Tasks Problems Properties Build Console OCD Command Shell (ONS rentsreel- iia ess Terminal 0 


Configuration ‘Programming Memory/Diagnostics 


Device Selection 


Current: | 


Configuration 
Flash Bank Addresses 


(=) AMD 

H) 29LVO04T 

# 29LV004B 

(4) 29LVO08BT 

(4) 29LVO08BB 

 29F010 

fH 29F040 

& 29F080/81 

)1024x 8 

1 Device 
2 Devices 
8 Devices 

H 29F016/17 

(H. 29F032/33 


9.6.1 Selecting a Flash Driver 


Base: | OxeQ000000 | Last: 


RAM Workspace 
Start: | OxO0FO0200 | End: 


Size; | 3992 


Set/Edit Timeouts 
Program: [ 


Erase: 


In the Device Selection field, browse to a description of your flash bank. Figure 9-1 
shows an example of a flash bank consisting of four 8-bit AMD 29F0808 devices. 


NOTE: For AMD flash devices, “F” and “LV” devices are interchangeable in 


Workbench. 


If you attempt to move on to the Programming tab without selecting a flash bank 
description in the Configuration tab, Workbench displays an Invalid Flash Bank 


error and returns you to the Configuration tab. 
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9.6.2 Configuring Flash Memory Bounds 


In the Configuration field, enter the Base value for the area of flash memory you 
wish to erase. In Figure 9-1 the address used is Oxe0000000. The Last field 
populates automatically. 


NOTE: Workbench erases flash memory sector by sector. That means that no matter 
where the address you enter in the Base field is located within the flash sector, 
Workbench will still erase the entire sector. 


If Workbench detects that the address you entered in the Base field is not correctly 
aligned with the flash sector boundary, it displays the following warning message: 


Figure 9-2. Incorrect Flash Base Address 


WARNING - Incorrect Flash Base Address 


A) Incorrect address: OxFFFFFFFF 


The base address you entered For your flash is incorrect, 
This address must be aligned on a boundary of 0x100000 


Clicking ‘Align’ will align your flash base address correctly For you. 
Clicking 'Cancel' will take you back to the configuration tab so that you can re-enter the base address manually, 


Clicking ‘Continue’ will allow you to use the incorrectly aligned address that you have entered, 
Be aware that this option could cause undetermined behavior while using the flash utility and is not recommended. 


Continue Cancel 


* To have Workbench align your base address, click Align. Workbench aligns the 
base address with the nearest preceding sector boundary. 


* To go back to the Configuration tab and re-enter the address manually, click 
Cancel. 


« To use the base address as you entered it, without aligning it with the flash 
boundary, click Continue. 
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CAUTION: Choosing Continue may cause unpredictable results in your flash 
programming operations. Wind River recommends that you align the base 
address with the flash sector boundary. 


9.6.3 Configuring RAM Workspace 


The flash programming algorithm needs to run on the target. This requires a RAM 
workspace, to which the algorithm will download. 


In the RAM Workspace field, enter the Start value for the area of RAM you wish 
to use as the workspace. In the Size field, enter the desired size of the workspace 
in bytes. In Figure 9-1 the starting address used is 0x00F00200 and the workspace 
size is 3992. The End field populates automatically. 


NOTE: A RAM workspace address of 0x00F00200 is not appropriate for all targets. 
For Wind River-supported targets, you can find the necessary RAM workspace in 
your processor’s target.ref file, located in 
installDirlvxworks-6.x/target/config/yourTargetBoard/target.ref, or target.ref.linux 
file, located at http://(www.windriver.com/suppott. 


9.6.4 Setting Timeouts 


To set a program or erase timeout, use the Program or Erase fields in the Set/Edit 
Timeouts area. Enter a timeout value in seconds. If you enter an invalid number, 
Workbench resets the timeout to its default setting. 


9.7 Flash Programming Tab 


Use the Programming tab to execute erase and program operations in flash and to 
specify files for download. 
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Figure 9-3 Programming Tab 


fleokenieuckeit 6 ©. Flash Programmer Binary Upload CF Options | OCD Statistical Code ... | Hardware Diagnostics | Cache | Trace 


Configuration | Programming | Memory/Diagnostics | 
Flash Programming Erase Sector Selection 
[_]Send "IN" before each operation OxFF100000 


= OxfF108000 

Enable pre-flash OxfF10c000 
— OxFF110000 
|_| Enable post-flash | Oxff120000 


OxfF140000 


OxFF180000 


« OxFF1a0000 
Add/Remove Files OxfF1co000 


Status File Path Start Addr... End Addr... Enabled || Add File Oxff1e0000 
| 
Convert File 


Select all | | Clear all 


(J Override erase sector selection 


Lower boundary address 


Upper boundary address | 


9.7.1 Erasing and Programming Flash 
To issue an IN initialization command before erase or program operations, select 
the Send “IN” before each operation checkbox. 


Click Erase to erase the contents of the flash memory sectors you selected in the 
Configuration tab. 


Click Program to program the flash memory with the files you selected in the 
Add/Remove Files area of the Programming tab. 


Click Erase/Program to perform both operations. Workbench will erase all selected 
flash sectors before programming. 


Click Abort to stop the erase or program operation. 


9.7.2 Verifying Flash Contents 
Click Verify to execute a byte-by-byte comparison between the file you just 


downloaded and the file already in memory. If there is a discrepancy, Workbench 
will break at that address and deliver an error message. 
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9.7.3 Running a Pre- or Post-Flash Script 


You can specify a script to run before or after an erase or program operation. Select 
the Enable pre-flash or Enable post-flash checkboxes (you can select either or 
both for any operation). Next to the checkbox, click Browse and navigate to the 
script you wish to run. 


9.7.4 Selecting Flash Sectors for Erasure 


The Sectors field automatically populates with the starting addresses of sectors of 
flash memory, depending on which flash device you specified in the 
Configuration tab. Click on a sector to select it. You can select all sectors by 
clicking Select All. Click Clear All to deselect all sectors. 


Before you erase all sectors, make sure you know what resides in the flash. For 
example, PowerPC 82xx processors read their reset configuration word from 
FE000000 out of the flash device, so for 82xx processors, erasing the entire device 
may cause problems with resetting the board. 


9.7.5 Manually Configuring Flash Memory Erasure Bounds 


Workbench allows greater user control by allowing manual configuration of the 
flash memory bounds for erase operations. 


You can manually configure the flash memory bounds by checking the Override 

erase sector selection checkbox. When this box is checked, Workbench will allow 
you to enter any addresses in the Lower boundary address and Upper boundary 
address fields. 


NOTE: If the values you enter result in a memory address range that is outside 
your target board’s flash programming area, erase operations will not perform 
correctly. 


9.7.6 Adding Files 


To add a .bin file, click Add File. This opens the Choose File for Flash Download 
browser window. Workbench automatically looks for a folder labeled firmware, 
located in installDir'workbench-2.x/dfw/version/host/firmware, where version is 
the installed version of the debugger middleware. If your .bin files are stored in 
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another folder, use the browser to navigate to it. Select the file you want and click 
Open. The file will appear in the File Path field. 


9.7.7 Removing Files 


To remove a file from the list, highlight it and then click Remove File. 


9.7.8 Converting Files To Wind River Flash Binary Format 


In order to use a file to program flash, you must convert it to a Wind River binary 
format that the Flash Programmer can use. Workbench can convert any of the 
following file types to Wind River binary format: 


«elf files 

« hex files 

« — srec files 

«any headerless flat binary (RAWBIN) file 


To convert a file to Wind River binary format, use the following steps: 
1. Inthe Programming tab, select Convert File. 


2. Inthe browser window that opens, navigate to the file you want to convert and 
click Open. 


The Convert utility appears. 
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File Conversion utility 


File path 
Input path: | C;\bitbucket\cdemo.elF | (J This is a raw binary file 
Output path: | C:\bitbucket\cdemo. bin 


Conversion output 
Address information 
Start; Ox00000000 


End: | OxfFFFFFFE 


Convert File 
Convert and Add File 


Converting the file to Wind River binary format does not delete the original 
file. 


By default, Workbench stores the new binary file in the same location as the 
original file. If you want the new binary file stored somewhere else, enter the 
path to the desired location in the Output path field. 


3. Select Convert and Add File. 


Workbench converts the selected file to Wind River binary format and adds it 
to the file list in the Programming tab. 
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File Conversion utility 


File path 
Input path: | c:\pitbucket\cdemo.elf (J This is 4 raw binary File 
Output path: | /C:\bitbucket\cdemo. bin ; 


Conversion output 


Address information convert ¥7.11G Copyright (c) 1996-2006 Wind River HSI 
Bs] convert ELF file C:\bitbucket\cdemo.elf to Flat Binary File C:\bitbucket\cdemo.bin 
220 DOORS - Extracting image from 'C:\bitbucket\cdemo. elf 
End: | OxfFFFFFFF Writing flat binary image to 'C;\bitbucket\cdemo. bin! 
Lower address: 0x0 
Upper address: OxfFFFFFFF 
Execution address: 0x00000400 
Image written 
Processing time: 0,000 seconds 


Convert File 
Convert and Add File 


OK Cancel 


NOTE: To convert the selected file to Wind River binary format without adding 
it to the file list in the Programming tab, select Convert File. 


4. Click OK. 


You are returned to the Programming tab. The file you just converted now 
appears in the File Path field. 


9.7.9 Setting The Download Offset Of A File 


In some cases, before you program the file into flash, you may need to set a 
memory offset bias to divert the data to other areas of the flash bank. 


Each file is built with a start address. This start address may or may not be the 
address where you want the image to reside on the board. If you subtract the start 
address of the image from the address where you want the image to reside on the 
board, then you end up with the proper bias address. 
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For example, if the image was built with a start address of 0x00 and you wanted 
the image to reside at the reset vector 0OxFFF00100, then the offset bias would be 


FFFO0100. 


You can use the Add/Remove Files area to edit the starting address of a .bin file to 
offset the file into flash. Click on the value under the Start Address heading to 
highlight it. Edit the value as needed. 


9.7.10 Enabling A File For Download 
Enable a file by clicking on the checkbox under the Enabled heading. If the file 
address is outside your specified address range, an error message appears: 


Cannot enable for download. 
Part of this file falls outside your flash address range. 


To correct this error, you must either change the start address of your file or use the 
Configuration tab to change your flash address range. 


9.8 Flash Memory/Diagnostics Tab 


Use the Memory/Diagnostics tab to view the contents of flash memory and to run 
diagnostic tests to verify your ability to write and erase flash. 


You must set up the Configuration tab before using the Memory/Diagnostics tab. 
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Programming | Add/Remove Files | Configuration Memory/Diagnostics | 


View address: J oxfFrooooa 


Program | Erase | Abort | 


FFFOOO10 
FFFOOO020 
FFFOOO30 
FFFOOO40 
FFFOOOSO 
FFFOOO60 
FFFOOO70 
FFFOOO8O 
FFFOOOSO 
FFFOOOAO0 
FFFOOOBO 
FFFOOOCcO 
FFFOOODO 
FFFOOOEO 
FFFOOOFO 


jadtress [0 [1 [2 [3 [4 [5 [e [7 [8 [9 [a |e [c [> [e |r [ascrt Z 


[July 20, 2c 
0123456789ak 
ghijklmnopqr 
wxyz!@#$S* & 


| Messages 


9.8.1 Viewing Memory 


Enter the address you wish to view in the View Address field. The area below 
displays the bit-level detail. To change the view, edit the address in the View 
Address field and click Refresh. You can also use the scrollbar on the right to scroll 
up and down from the starting address to the end address. 


9.8.2 Running Diagnostic Tests 


To test your ability to write to flash memory, click the Start Program Diagnostic 


button. This writes a bit pattern to flash. 


You may see a Target Exception message. This requires no action. 


If the write operation is successful, you should see the pattern *WRS_FLASH* 
repeated under the ASCII heading in the Memory/Diagnostics tab, as shown in 


Figure 9-5. 
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Figure 9-5 Successful Program Diagnostic 


Programming | Add/Remove Files | Configuration Memory/Diagnostics | 


View address: J oxffrooooo Refresh | Program | Erase | ie 


SF 46 4C 41 53 48 2A SF 24 S57? S52 53 SF 46 4C 41 _FLASH*_ *WURS_FLA 
53 48 2h SF 2A S57? 52 53 SF 46 4C 41 53 48 ZA SF SH*_*WRS_FLASH*_ 
24 S57 S52 53 SF 46 4C 41 53 48 2A SF 2A S7? S2 53 *WRS_FLASH*_*WRS 
SF 46 4C 41 53 48 2A SF 24 S57? 52 53 SF 46 4C 41 _FLASH* *URS_FLA 
53 48 2A SF 2A S57 S52 53 SF 46 4C 41 53 48 ZA SF SH*_*WRS_FLASH*_ 
2a S57 52 53 SF 46 4C 41 53 48 2A SF 2A S7? S2 53 *WRS_FLASH*_*WRS 
SF 46 4C 41 53 468 2A SF 24 S57? S52 53 SF 46 4C 41 _FLASH*_ *WURS_FLA 
53 48 2h SF 2A S57? 52 53 SF 46 4C 41 53 48 2A SF SH*_*WRS_FLASH*_ 
2A S57? S52 53 SF 46 4C 41 53 48 2A SF 2A S7? S2 53 *WRS_FLASH*_*WRS 
SF 46 4C 41 53 468 2A SF 24 S57? 52 53 SF 46 4C 41 _FLASH* *WRS_FLA 
53 48 2A SF 28 57 52 53 SF 46 4C 41 53 48 2A SF SH*_*WRS_FLASH*_ 
2a S57 52 53 SF 46 4C 41 53 48 2A SF 2A S7? SZ 53 *WRS_FLASH*_*WRS 
SF 46 4C 41 53 48 2A SF 24 S? S2 53 SF 46 4C 41 _FLASH*_ *WRS_FLA 
53 48 2A SF 28 S57 S52 53 SF 46 4C 41 53 48 ZA SF SH*_*WRS_FLASH*_ 
24 S57? S52 53 SF 46 4C 41 53 48 2A SF 2A S7? S2 53 *WRS_FLASH*_*WRS 


= 


If the write operation is unsuccessful, the diagnostic will never complete. You will 
need to click the Abort Diagnostic button to stop the write operation. Check to 
make sure that you have the right flash device selected in the Device Selection 
area in the Configuration tab, and that you are using the correct base address. 


To test your ability to erase flash memory, click the Start Erase Diagnostic button. 
This will erase the selected flash sectors. 


You may see a Target Exception message. This requires no action. 


If the erase operation is successful, the selected sectors will be erased and the space 
under the ASCII heading in the Memory/Diagnostics view will be empty. 


If the erase operation is unsuccessful, the diagnostic will never complete. You will 
need to click the Abort Diagnostic button to stop the erase operation. Check to 
make sure that you have the right flash device selected in the Device Selection 
area in the Configuration tab, and that you are using the correct base address. 
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10.1 Introduction 


This chapter describes the basic concepts required to use Wind River On-Chip 
Debugging (OCD) tools to debug a Linux system. 
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Wind River OCD tools for kernel and kernel module debugging allow you to 
develop Linux board-support code, such as LSP, drivers, stacks, I/O, and kernel 
priorities. 


NOTE: Linux memory management is not supported for all processor families. 


For general Workbench information, see the Wind River Workbench for Linux User's 
Guide. 


10.2 Linux Virtual Memory Management Architecture 


Since Wind River OCD tools typically access the entire physical address space 
(memory, devices, and peripherals), it’s important to know how Linux manages 
the virtual memory space and translates to an OCD memory access. 


The Linux memory architecture consists of three identified spaces: 


«Kernel Space - Virtual and partially linear (generally fixed and not paged.) 
OCD Kernel Mode supports static translation and paged translation. 


« Static translation covers all areas statically linked to the kernel. 


«  Paged translation covers all dynamically allocated areas, such as kernel 
modules, insmod and kmalloc. 


« _ Exception Space - Fixed and linear (component of kernel space, architecture 
dependent.) Used for Real Mode. 


Real Mode is the mode of debugging of an application that is executing in the 
target when the Linux memory management unit (MMU) is disabled. In this 
mode the CPU is not translating addresses.It usually covers the startup of the 
kernel until the MMU is initialized and the exception vector. 


« User Space - Virtual but not linear (demand paged). User space is the memory 
area where all User Mode application work can be swapped out when 
necessary. 


Pages currently swapped out of these spaces to a filesystem cannot be accessed. 
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10.3 Connection Parameters 


To use the Target Operating System (TOS) awareness for Linux, some 
configuration is necessary in the connection definition you create in the Target 
Manager view in Workbench. 


1. Having selected your emulator type and target processor, click Next. 


The Target Operating System Settings dialog appears, as shown in 
Figure 10-1. 


2. Inthe Booted Target OS on selected CPU: field, point to the kernel image that 
you are using. Workbench uses this kernel image only to load the symbols 
automatically, and not to download them physically to the target. 


Figure 10-1 Target Operating System Settings 


~W) New Connection 


Target Operating System Settings 


Select the target operating system which is currently booted on the 
configured target. 


Available CPU(s) on target board: 


Target operating system settings 


Booted Target OS on selected CPU: | None 


Description: 
Providing plugin: 


Kernel image: Browse... 


Kernel image is optional for None 


Target OS plugin pass-through options: v | 
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3. Click Next. 
The Memory Options dialog appears, as shown in Figure 10-2. 


Figure 10-2 Memory Options 


“) New Connection 


Memory Options 


Specify the memory options for the target cpu. 


Available CPU(s) on target board: 
Memory mapping 


Offset Size Attributes 


Undefined memory areas accessible 


| < Back IL Next > ] 


Use this dialog to specify the base address and size of the physical RAM that 
is allocated to the Linux system. 


4. Click Next. 
The Object Path Mappings dialog appears, as shown in Figure 10-3. 
5. Select Load module symbols to debug server automatically if possible. 


6. Define the path substitution required between your target filesystem and host 
filesystem. If your system loads a large number of modules automatically, you 
may want to load the symbols manually for only the subset wanted. 
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Figure 10-3 Object Path Mappings 


%% New Connection 


Object Path Mappings 


Specify how files in the target file system are visible in the host File system. 


Available CPU(s) on target board: (default From taraet) 


Load module symbols to debug server automatically if possible 


Pathname prefix mappings: 


Target Path Host Path 


<leave path unchanged> 


¢ | (enar.] 


Basename mappings: 


[*;*.unstripped],[*;*] 


7. Click Next. 
The Target State Refresh dialog appears, as shown in Figure 10-4. 
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Figure 10-4 Target State Refresh 


~™) New Connection 


Target State Refresh 


Configure the core(s) target states refresh settings. 


Available CPU(s} on target board: ™ 


Initial target state query settings 
(| Query target object lists and target object states on connect 
{_] Query target object state(s) on stopped events 


[| Query target object state(s) on running events (receiving object only) 


Target state refresh settings 
@ Refresh the target state manually only 
© Auto-refresh the target state periodically 


[Listen to execution context life-cycle events (context-start, context-exit) 
It is not known if life-cycle events For execution contexts are provided. 


8. Select your desired refresh method. 


The default setting is Refresh the target state manually only. Retrieving target 
memory through OCD is very time-consuming, so if you select Auto-refresh 
the target state periodically, it can slow your project significantly. 


The change of state (running or stopped) is event driven, and does not require 
auto-refresh to update Workbench on these events. 


9. Click Next to bring up the connection summary. 


10. Click Finish. 
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10.4 Emulator Configuration 


Once you have connected to your emulator, you must enable the MMU 
configuration. 


In the CF Options view, set the Memory Management Unit Mode (MMU) option 
to ENABLED, or enter the command 


>BKM>cf£ mmu enable 
at the >BKM> prompt in the OCD Command Shell. 


This will enable the translation mechanism required to debug a Linux kernel with 
an OCD connection. 


If you plan to use OCD to transfer the boot line to the kernel (see 10.6 Booting a 
Linux System with OCD, p.185): 


In the CF Options view, set the Load Boot Table on IN (BL) option to ENABLED, 
or enter the command 


>BKM>cf bl enable 


at the >BKM> prompt in the OCD Command Shell. 


Enabling this option will cause the boot line to be written into memory upon every 
target reset. 


10.5 MMUL Settings 


Linux has address locations that are defined and translated before runtime. For 
instance, the Linux image may be compiled at an effective address of 0xC0000000, 
loaded into the target at RAM location 0, and run from location 0 until the Memory 
Management Unit is initialized and turned on. Other locations may be I/O, DMA, 
or other fixed and linearly mapped locations, such as the address locations of 
exceptions that run in Real Mode. The MMU commands allow you to pre-map 
these locations for facilitating downloads and improving performance. 


MMU commands: 
" MMUL: List the pre mapped translation(s) 
= MMUA: add a translation 
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= MMUD: remove one or all translations 


In most cases, only one MMUL translation needs to be defined: the one that maps 
the entire physical address space into the kernel space. 


MMUL logical_address physical_address mask Mode Process_ID 


Example 1 


For a board that has 512 MB of RAM and the kernel linked at 0xC0000000, the 
following MMUL is required: 


Logical address: 0xC0000000 

Physical Address: 0 

Mask: 0xe0000000 // mask a region of 512 MB 

Mode and Process ID (PID) can be set to 0, as they are reserved for future use. 
At the >BKM> prompt in the OCD Command Shell, enter 


>BKM>mmua C0000000 0 E0000000 0 O 


Example 2 


To map direct access to a 64 KBI/O region located at FE0000000 and 64KB: 
At the >BKM> prompt in the OCD Command Shell, enter 


>BKM>mmua £e000000 fe000000 £££FL0000 0 O 


Example 3 


Some PowerPC architectures (such as PPC6xx, PPC7xx, and PPC82xx) disable 
their MMU entirely when entering an exception. These architectures require a 
translation to map the bottom of the memory so the tools can debug exception 
handler (64K in this example): 


>BKM> mmua 0 0 f£fff£0000 0 O 


These settings are persistent, and need to be entered only once. 


NOTE: The Workbench Linux plug-in automatically sets the MMUA to 
0xC0000000 based on the memory settings you enter in the Memory Options page 
in the New Connection wizard. 
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10.6 Booting a Linux System with OCD 


There are two main methods to boot a Linux target with OCD tools: 


" Rely on the existing boot loader, such as redboot, uboot, or yamon, to boot the 
system as if the OCD tools were not connected to the target. 


» Use the OCD tools’ boot line capabilities to download and boot a Linux kernel 
image without using a boot loader. 


10.6.1 Standard Boot 


If a boot loader is already developed for your target, this is probably the easiest 
way to start debugging a Linux System with OCD tools. 


You need to reset the target, let the target resume from its reset vector, and let the 
boot loader load and boot the Linux image. 


If a boot loader is resident and configured to boot Linux, you do not need a register 
file. 


Workbench automatically installs a hardware breakpoint at the start of the Linux 
kernel to detect that the kernel has been loaded. This enables the TOS awareness 
features (such as the List of Processes), as well as all the breakpoints you have 
already defined. 


NOTE: After every reset, all user breakpoints are automatically disabled until the 
kernel has started. 


For a standard boot, use the following steps: 
1. Inthe Target Manager view, select Reset and Download. 


The Reset and Download view appears, as shown in Figure 10-5. 
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Figure 10-5 Reset Tab 


W WRICE_440GP - 440GP 


Modify attributes and launch. 


Name: | WRICE_440GP - 440GP 


@ Main % Projects to Build | # Reset | @ Download | @ Instruction Pointer | @ Run Options | 7 Source | F) Common 


440GP | 


| (JPlay register file 


| reset finu-reset CY 
© Specified core 
Oallcores 
Cores tied on reset: 


2. Inthe Reset tab, check the Reset box and select INN -- Reset. 


On an INN command, the tools will reset the target without initializing any of 
the peripherals. 


3. Select the Download tab. 
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Figure 10-6 Download Tab 


i, WRICE_440GP - 440GP 


Modify attributes and launch. 


Name: | WRICE_440GP - 4406P 


@ main) © Projects to Build | @# Reset # Download | @# Instruction Pointer | # Run Options | 'y Source | 1 Common 


SAQGE || eeettet Oeil = Sues enon ces 


Filename Download Verify Load Symbols Offset 


If you entered a kernel image name in the Target Operating System Settings 
dialog (see 10.3 Connection Parameters, p.179), you do not need to specify a 
download file. 


If not, select your Linux image (vmlinux) and select the checkbox in the 
Download field. Set the Verify field to None and leave the Load Symbols field 
unchecked. 


4. Select the Instruction Pointer tab. 
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Figure 10-7 Instruction Pointer Tab 


W WRICE_440GP - 440GP 
Modify attributes and launch. 


———— 
@ Main | © Projects to Build | # Reset | # Download @. Instruction Pointer | #\ Run Options Ey Source 


[Kaa 7 


(_]Set instruction pointer after download 


art add From download file 


pecified start address 


5. Uncheck Set instruction pointer after download. The INN reset will leave the 
instruction pointer already at the reset vector. 


6. Select the Run Options tab. 
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Figure 10-8 Run Options Tab 


W WRICE_440GP - 440GP 


Modify attributes and launch. 


Name: | WRICE_440GP - 440GP 


@ Main | * Projects to Build | @ Reset | Download | @# Instruction Pointer | @ Run Options | Ey Source | =] Common 
wv 

—. 

4406P | 


ODo not run 


O Run to address 
® Run to end of program 


7. Select Run to end of program. This automatically starts the target after the 
reset is completed. (Optional, but recommended for targets running a 
Watchdog timer by default to reduce the time elapsed between INN and GO.) 


NOTE: AMCC 40X and 44X processors have a debug control register (DBCR0O) that 
controls debug event conditions, which can affect the operation of any emulator. 
By default, uboot clears this register, which disables the breakpoint mechanism. 
Either use a version of uboot that does not clear this register, or select Play post 
download script and specify a script to issue the command DR DBCR0 81000001 to 
the target, thereby re-initializing the DBCRO register for emulator debugging. 


8. Click Debug. 
10.6.2 OCD Boot 


OCD tools can download the kernel image directly into memory, allowing you to 
start the kernel without boot loader involvement. 
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If you are loading and starting the Linux kernel directly through JTAG, without a 
boot loader, you need a register file. The register file needs to initialize the registers 
for correct memory access as well as the boot line. 


No MMUL or MMUOS settings should be part of the register file; these parameters 
are initialized upon connection to the target, when a symbol file is loaded (or 
reloaded.) 


The OCD tools will reset the target, initialize the required target peripherals 
according to the values defined in the register file, and initialize the required boot 
parameters into memory as defined in the BL command. 


To perform an OCD boot, use the following steps: 
1. Inthe Target Manager view, select OCD Reset and Download. 


The Reset and Download view appears, as shown in Figure 10-9. 


Figure 10-9 Reset Tab 


¥W) Reset & Download 


Core Connection: MPC8260 


Reset | Download | Instruction Pointer | Run Options | Status 


[_]Play register file 


Reset IN - Reset/setup regs 


©® Specified core 
Odll cores 

Cores tied on reset: 
| MPCaz60 


Reset and Download 


2. Inthe Reset tab, check the Reset box and select IN -- Reset/setup regs. 


On an IN command, the tools will reset the target, initialize peripherals with 
the register file value, and initialize the boot line. 
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3. Select the Download tab. 
Figure 10-10 Download Tab 


W Reset & Download 


Core Connection: MPC8260 


Reset Download | Instruction Pointer | Run Options | Status 


| Filename Download Verify Load Symbols Offset | 


C:\yvmlinuxtymnlinux (ial) Vv | None a iv 


> 


< 


4. Click Add Files to specify the kernel image to download. Select both 
Download and Load Symbols. Set the Verify field to None. 


5. Select the Instruction Pointer tab. 
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Figure 10-11 Instruction Pointer Tab 


W Reset & Download 


Core Connection: MPC8260 


Reset | Download | Instruction Pointer | Run Options | Status 


Set instruction pointer after download 


@ Use specified start address (7 


Reset and Download Apply 


6. Select Set instruction pointer after download. 


7. Select Use specified start address and set the instruction pointer to the start of 
the kernel. 


NOTE: For all architectures that start with the MMU disabled, the start address is 
not the one defined in the *.elf file, but the translated one to the real space. For 
example, 82xx vmlinux reports a start address at 0xC0000000, but the real start 
address is 0. 


8. Click Reset and Download. 


10.7 Boot Line Commands 


Wind River emulators support various low-level commands and configuration 
options that allow you to create, define, pre-set, and manage the Linux boot line 
parameters and Linux kernel paging mechanism. 
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The following table gives an overview of the low-level commands and 
configuration options that are specific to Linux boot line configuration. For full 
descriptions, see the Wind River Workbench On-Chip Debugging Command Reference 
and the Wind River Workbench for On-Chip Debugging Configuration Options 
Reference. 


Low-Level Boot Line Commands 


Command Examples Description 
BL BL ADD These commands allow you to customize the 
BL DELETE location and values for the Linux boot line, which 
BL MODIFY are automatically passed to Linux through a 
BL DISPLAY register group. Available only when the 
BL UPLOAD configuration options MMU and BL are set to 
ENABLED. 


NOTE: In addition, these commands may require other resources, such as target 


workspace (RAM). For instance, the BL command requires you to allocate target 
memory using the CF WSPACE configuration option. 


Like other operating systems, Linux requires parametric information about its 
network, file system, and target board environment. In some cases, these boot line 
parameters may be compiled into the Linux image as default parameters; or Linux 
may acquire these parameters from the boot loader for more versatility. 
Consequently, Linux must be customized to accept the parameter format of the 
boot loader (for example, uboot). Generally, Linux retrieves pointers or values to 
boot line parameters by using registers. Boot line parameters include memory 
information, IP address information, and so on. Incorrect boot line parameters are 
an obstacle to the successful bring-up of Linux. 


The various BL commands allow you to create any number of structures, which are 
appropriate for virtually any Linux startup. The structures may reflect the fields of 
the Linux architecture-specific structure bd_info bd_t; the Linux boot line; or even 
the MAC address assigned to the board. 


Pointers to the structures are generally passed using a group of registers. The 
structures and their registers can be entered and held by the emulator using a BL 
command and passed on a GO command. Once both tables (Structure and 
Register) are configured with the BL commands, Linux boot loader code is no 
longer required to be pre-installed-embedded into the target and/or included 
within the downloaded application. Those tables are retained in the emulator's 
NVRAM, so their contents are persistent from one session to another. 
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The following example displays a customized set of boot line parameters for a 
particular distribution of Linux that have been generated by the BL command and 
stored in the emulator’s NVRAM. On a GO command, these parameters will be 
loaded into the target memory and passed to Linux via a set of register pointers. 
This process is controlled by the emulator's run-time firmware DLL. 


Example: 


Dynamic Boot Table: structure configuration 


Entry Description Value/String 

00 MemStartAdd 0x00000000 

01 MemSize 0x04000000 

02 FlashStart 0x40000000 

03 FlashSize 0x00400000 

04 Flashoffset 0x00040000 

05 SRAMStart 0x00000000 

06 SRAMSize 0x00000000 

07 IMMR_Base 0x£0000000 

08 BOOTFlags 0x00000001 

09 IP_ADDR 0x00000000 

10 ENETADDR [6 ] 0x00a01lea87bcb 

11 ETHS PEED 0x6c79 

12 INTFREQ 0x0bcd3d80 

13 VBUSFREQ 0x01£78a40 

14 CPMFREQ 0x03ef1480 

15 BRGFREQ 0x01f£78a40 

16 SCCFREQ 0x01£78a40 

a VCO 0x07de2900 

18 BAUDRATE 0x00002580 

19 bi_mon_fne Ox0fffffff 

20 cmdStrg ->console=ttyS0,9600 root=/<- 
->dev/ram0 rw 


The Entry field is a sequential reference for each line item. 
The Description field is an ASCII field only used for comment. 


The Value/String field can contain a char, byte, unsigned long, or unsigned short 
value. 


* Unsigned long values are displayed in hex using 8 digits, as shown in Entry 01. 

« Unsigned short values are displayed in hex using 4 digits, as shown in Entry 
11. 

«Char values are displayed as shown in Entry 20. (Char strings greater than 20 
characters are displayed on several lines, using arrows.) 

« Byte values are displayed as shown in Entry 10. 
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Examples of boot lines for various architectures and boot loaders are provided as 
part of the Linux register files distributed with Wind River Workbench. 


10.8 Reverse-Engineering the Boot Line Parameters 


The boot line parameters change with the target architecture, the Linux 
architecture, and the developer. You may desire the boot line parameter 
information without knowing the low-level details in order to set up a boot line 
script. In most cases, this is possible by acquiring an operational target board with 
startup/bootstrap firmware and doing the following: 


1. 
2. 


Set up the target with your Wind River emulator. 


Allow the boot ROM to run from ROM by issuing the INN and GO commands. 
(Assuming you have set up the MMUL properly.) 


Download your image using Tftpboot. 


Halt the emulator by issuing a HA command, and set a hardware breakpoint 
at the beginning of where your Linux image will start. This start location can 
be retrieved from the System.map of the vmlinux build. 


NOTE: Some processors have debug control registers that are essential for 


emulator function, and which may be manipulated by the boot ROM. Halting 
after Tftpboot may allow the emulator to reacquire control of these debug 
control registers. 


Uncompress and boot your image using bootm. 


After hitting the hardware breakpoint, issue a DR command to display the 
register setup before Linux starts. 


The registers contain pointers to the boot information structures. For uboot, 
consider r2, 13, r6, and r7 (r4 and r5 are generally the RAMdisk pointers and 
should be set to zero if there is no RAMdisk). 


At the >BKM> prompt, enter DML (r3) and press ENTER several times. This 
displays the boot information. Do not make any changes at this time. This is 
only to understand what your boot flash put into memory for Linux boot 
information. 
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Now you should be able to download your Linux image (as before, but 
without a reset or register load) and run the image as if it were booted from 
ROM. If the boot ROM successfully boots the Linux image, then your Linux 
image is compatible with your boot ROM and the image of the boot 
information structure can be retrieved by the emulator. If not, you must set up 
the boot line in a register file in accordance for Linux. To do this, you need to 
know what your Linux image expects for boot information (in memory). 


8. The downloaded image (via the emulator) is now functioning properly and 
has the proper boot line and register setup from ROM. Next, repeat Steps 2 
through 5 and capture/duplicate the register setup (as in Step 6) and memory 
storage with the boot line facility. 


10.9 Debugging the Linux Kernel 


Wind River Workbench OCD Edition allows you to debug every part of the kernel, 
starting at the very first opcode, as if it were any standalone application. It is 
possible to debug the early initialization routines, as well as the entire boot 
sequence. 


Wind River recommends that the kernel be built with -gdwarf2 to optimize the 
symbol reading performances in Workbench. 


NOTE: Due to the required optimization level used to build the Linux kernel, some 
of the source level single stepping operation seems to not follow the code flow, and 
steps out of order. 


10.9.1 Debugging Linux Kernel Modules 


Linux kernel modules are dynamically allocated in the kernel space when an 
insmod is performed. 


Kernel Module Detection 


Workbench automatically detects that a module was installed and lists the module 
name in the Target Manager view. 
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Workbench transparently installs breakpoints in the sys_init_module and 
free_module functions to keep track of the module loading and unloading in the 
system. 


If you defined the target RootFileSytem path in the connection wizard (see 

10.3 Connection Parameters, p.179), Workbench can automatically read the symbol 
file and relocate the different sections according to where the module has been 
allocated, to allow debugging of the module. (You can also manually load the 
symbol file by right-clicking the module name and selecting Load Symbol File.) 


Debugging the init() Function of a Module 


Figure 10-12 


To debug the init() function of a module, use the following steps: 


1. Place a breakpoint in the sys_init_module function where the mod->init() is 
called. 


2. Inthe Linux shell, enter the command insmod module_name. 
3. When the breakpoint is hit, step in the init() function. 


Note that Workbench automatically detects the module when sys_init_module is 
exited. 


To see the module appear in the Target Manager view while stopped in the middle 
of sys_init_module, select the target that needs to be refreshed in the Target 
Manager view and press the Refresh button in the top right of the view. 


Target Manager View 
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10.10 Kernel Configuration 


For the Linux 2.6 kernel, the kernel module section link information is not 
persistent in the kernel structures by default. For Workbench to properly relocate 
the different modules’ symbol files, this information must be made persistent 
using one of the following methods. 


«For kernel versions 2.6.12 and above, set CONFIG_KGDB. 


« For kernel versions 2.6.11 and below, you must both set CONFIG_KGDB and 
apply a patch to the kernel. The necessary patch is named module.patch and 
is located in installDirlwrwb_2.x_50/linux-2.x/kgdb/wrs-2.2.1/linux-2.6.10. 


If turning on KGDB is an issue, the equivalent functionality can be obtained by 
enabling the code conditionally compiled for CONFIG_KGDB in the 
/kernel/module.c and /include/linux/module.h files. 


In both module.c and module.h, replace 

#ifdef CONFIG_KGDB 

with 

#if defined (CONFIG_KGDB) | | defined (CONFIG_WINDRIVER_OCD) 
In module.h, add 


#define CONFIG_WINDRIVER_OCD 


(There are four instances in module.c and one in module.h.) 


10.11 Debugging User Space Applications with OCD 


You can use the Target Manager in Workbench to attach to a running process or a 
particular thread of a process. This creates a debug context to see the state of a 
particular process and debug it. The debug context thus created represents the User 
Mode context of the attached process. 


Every Linux application has two contexts: User Mode and Kernel Mode. Both 
modes use the same process ID (PID.) 


Workbench can attach only to threads that have a User Mode context. Workbench 
cannot currently attach to kernel threads. 
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The User Mode context can make system calls to the Kernel Mode context, but you 
can see Kernel Mode context only in the system context. 


OCD allows full debug capabilities within the user space application and its 
shared libraries. 


10.11.1 Attaching to a Process 


You cannot create a process with OCD; you can only attach to one that is already 
existing. 


To attach to a running process, use the following steps: 


1. 
2; 


In the Target Manager, click the Refresh View button. 
Right-click on the process you want to attach to and select Attach to Process. 


This option is only available for User Mode processes. For processes where it 
is not available, the option will be greyed out. 


Currently there is no way to auto-resolve a symbol file for the application, so 
you must load symbols manually. Right-click on the attached process and 
select Load/Add Symbols to Debug Server. 


The Load/Add Symbols dialog appears. 
Click Add. 


In the browser window that opens, navigate to the symbol file you wish to use 
and click Open. 


You are returned to the Load/Add Symbols dialog. 
Click OK. 


10.11.2 Debugging a Process 


Use the Debug view to run, step, and set breakpoints in process threads. 


NOTE: You cannot stop only one thread. Whenever a breakpoint is hit in any 
thread, the whole system stops. 
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10.11.3 Setting Breakpoints 


Linux uses on-demand memory allocation; memory is not allocated to an 
application until it needs it. You cannot set software breakpoints in areas of 
memory that are not yet allocated. Attempting to set a software breakpoint in 
unallocated memory returns an error: 


!ERROR! [msg 170000] : Unable to map virtual address 


However, you can always set hardware breakpoints in the entire address space. 


10.11.4 Thread-Qualified Breakpoints 


By default, a set breakpoint goes to the parent; but Workbench allows you to set the 
scope of a breakpoint to a single thread by selecting the drop-down menu in the 
Breakpoints view and selecting Breakpoint Preferences. 


However, whenever the breakpoint is hit, Workbench will stop the target, 
determine if the breakpoint was hit in the correct thread, and if not, restart the 
target. This transparent restart of the target can have an impact on the real-time 
aspect of the application. 


This is also true of processes. If you run the same process several times, the code 
section of the application is not replicated; all the processes use the same area of 

user space. So if a breakpoint is hit in one process, all other processes will stop to 
check if the breakpoint was hit in the correct process and then resume. 


10.11.5 Debugging the Beginning of a Process 


To debug the beginning of a process, use an internal hardware breakpoint. 


Set an expression hardware breakpoint from the system debug context at the start 
address of the application. Then start your process. 


10.11.6 Limitations 


« You cannot start a process using OCD; you can only attach to an already 
existing process, started from the shell or elsewhere. 


« There is no notification when a process dies. You must detach from the process 
manually. 
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Workbench cannot currently attach to kernel threads. You can debug kernel 
threads through the system context. 


10.12 Linux Troubleshooting 


If you are having trouble, check the following: 


Make sure the kernel symbol file has debug information. 


Make sure the MMUL command returns 1 translation of type PHY-KERN to 
match the Linux kernel translation. 


Make sure the MMUOS command returns a list of parameters consistent with 
the Linux kernel version you are using. 
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11.1 Introduction 


NOTE: The Transparent Mode Driver is not supported for Wind River Probe. This 
chapter applies only to the Wind River ICE SX. 


In VxWorks debugging, a Wind River Debug (WDB) agent runs on the target as a 
kernel task to provide debugging support. You can use the WDB agent to debug 
kernel tasks and real-time processes on the target. The WDB agent specifies how 
the target server on the host communicates with the target agent on the board. 
Typically, Workbench communicates with the WDB agent using an Ethernet or 
serial connection. 


In some cases an Ethernet or serial connection may not be available for use; for 
example, if your target does not have an Ethernet or a serial port on it, or if you are 
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using those ports for some other purpose. In this case you can use the Wind River 
Transparent Mode Driver. 


The Transparent Mode Driver provides an alternate communications channel for 
allowing Workbench to talk to the WDB agent. The Transparent Mode Driver 
works through the Wind River ICE SX, implementing communication over the 
BDM/JTAG/EJTAG connection. The connection to the target operates entirely 
through the standard BDM or JTAG debug link. 


The Wind River Transparent Mode Driver supports all of the debug capabilities of 
the WDB agent, including system mode, task mode, and virtual I/O. When 
connected through the Transparent Mode Driver, the Wind River ICE SX also 
functions as a second on-chip debug channel. This allows you to use the ICE to 
download VxWorks images, set breakpoints in the kernel, debug device drivers, 
and so on, in addition to using the WDB agent for task and process debugging. 


In order to use the Transparent Mode Driver, you must set your Wind River ICE SX 
to TMD mode, as described in TMD Mode, p.207. 


You must also incorporate the Transparent Mode Driver into your Workbench 
build. For information doing this, and for general information on the WDB agent, 
please see the Wind River Workbench User’s Guide: Setting Up Hardware. 


11.2 Connecting Through the Transparent Mode Driver 


The most common use of the Transparent Mode Driver is to act as a WDBRPC 
connection mechanism to the WDB target agent. 


This section briefly explains some of the technical details regarding how the 
Transparent Mode Driver works when it is being used as the link connecting the 
WDB agent on the target and the target server on the host. 


When the Transparent Mode Driver is not being used, the host to target agent 
connection consists of either a network or a serial connection, as shown in 
Figure 11-1. 
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Figure 11-1 Typical Host to Target Agent Connection 


Application 


Workbench 


WDB Agent 
Target Server 


Serial or Network 
WDBRPC Backend WDB Protocol Driver 


Network or serial connection 


For this connection scheme to work, you need a fully functional Board Support 
Package (BSP), along with known good hardware, as well as network and/or serial 
drivers. 


When you use the Transparent Mode Driver, the connection scheme is simplified, 
as shown in Figure 11-2. 


Figure 11-2. Connection Using the Transparent Mode Driver 
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In this scenario, the Wind River ICE SX provides the link between the backend and 
the target agent. From the perspective of the host tools, the Transparent Mode 
Driver appears to be identical to the standard supplied connection (either an 
Ethernet or a serial connection). 


When you are using the Transparent Mode Driver, the only difference when setting 
up the target server is that the IP address of the Wind River ICE SX is listed in the 
target server configuration dialog box instead of the IP address of the target. 


Information on configuring a target server is available in 11.4 Configuring the Target 
Server, p.209. 


11.3 Using the TMD With the Wind River ICE SX 


You may need to configure your Wind River ICE SX before you can use it with the 
Transparent Mode Driver. 


11.3.1 Configuring Wind River ICE SX 


Information on configuring Wind River ICE SX for network operation is available 
in the Wind River ICE SX for Wind River Workbench Hardware Reference. Follow the 
instructions provided in that document to configure your Wind River ICE SX for 
network operation. 


There is one additional option that must be set when you are using the Transparent 
Mode Driver; the UDP Console Port must be set to 17185. The following steps 
explain how to do this. 


1. Inthe ethsetup menu, accessible from the >NET> prompt (as described in the 
Wind River ICE SX for Wind River Workbench Hardware Reference), select Option 
5 to view the current port settings. 


2. If UDPCNSL is already set to 17185, no modifications are necessary, and you 
should exit the ethsetup menu. 


3. If UDPCNSL is not set to 17185, type 6 to allow the port values to be changed. 
A list of port settings appears. 
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4. Type the number assigned to the UDPCNSL port, which will allow the 
UDPCNSL port setting to be changed, and change it to 17185. 


5. Type 0 to exit the Change Port Settings menu. 
You are returned to the main ethsetup menu. 


6. To save the changes in the ICE unit’s NV-RAM, select Option 8 and press 
ENTER. 


7. Select Option 9 to exit the ethsetup menu. 
You are returned toa >NET> prompt in the Terminal view. 
8. Power cycle the Wind River ICE SX unit so these changes take effect. 


The ICE unit runs through the same series of internal tests as on initial startup, 
making sure that all the hardware and firmware in the unit is functioning 
correctly. These tests are again displayed in the Terminal view in Wind River 
Workbench, and when they conclude, the > NET > prompt is again visible in 
the view. 


11.3.2 Configuration Options 


For some processors, you may also need to change some of the configuration 
options on your Wind River ICE SX. 


NOTE: For Freescale ColdFire processors, setting the CF options TMD Mode and 
Trap Exception is not necessary. For ColdFire processors you only need to set the 
CF option Target Console Redirection. 


Setting CF Options in the CF Options View 
In the Workbench toolbar, click on Window and select Show View > CF Options. 


TMD Mode 


1. Under the Command Name heading in the CF Options view, scroll down to 
TMD. 


2. Double-click on the value under the Current Setting heading to bring up a list 
of options. 


3. Select ENABLE. 
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4. Click on the Send All CF Options to Target icon. 


Trap Exception 


1. Under the Command Name heading in the CF Options view, scroll down to 
TRPEXP. 


2. Double-click on the value under the Current Setting heading to bring up a list 
of options. 


3. Select BREAKPOINTONLY. 
If BREAKPOINTONLY is not available for your target board, set TRPEXP to NO. 
4. Click on the Send All CF Options to Target icon. 


Target Console Redirection 


1. Under the Command Name heading in the CF Options view, scroll down to 
TGTCONS. 


2. Double-click on the value under the Current Setting heading to bring up a list 
of options. 


Select BDM. 
4. Click on the Send All CF Options to Target icon. 


Setting CF Options with Low-Level Commands 


You can also set these options using low-level commands. 


1. Inthe Workbench toolbar, click on Window and select 
Show View > OCD Command Shell. 


2. At the >BKM> prompt in the OCD Command Shell, type CE 


A list of the current settings for the CF options on your Wind River ICE SX will 
appear. 


At the >BKM> prompt, type CF TMD ENABLE and press ENTER. 
4. Type CF TRPEXP BREAKPOINTONLY and press ENTER. 

If BREAKPOINTONLY is not available for your target board, set TRPEXP to NO. 
5. Type CF TGTCONS BDM and press ENTER. 


6. Type CF again. 
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The CF options now show the values you entered. 


7. Type the command IN or INN to reset the processor. Your changes will not take 
effect until you reset the processor. 


11.4 Configuring the Target Server 


If an image is running on your target, your host will be able to communicate with 
the running WDB agent. To do this, you must configure and activate a Target 
Server. To configure a Target Server, use the following steps. 


First, open Workbench according to the method for your host computer. 


Linux/Solaris Hosts 
From your installation directory, issue the command 


S ./startWorkbench.sh 
Windows Hosts 
Select Start > All Programs > Wind River > Wind River Workbench version. 


On Windows hosts, Workbench prompts you to specify a workspace location. 
Linux hosts use the default location installDir!workspace. 


When Workbench opens, the Quick Target Launch dialog appears. 
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Wind River On Chip Debugging 
@ Choose How You Want to Start 


1. Select Create a new launch configuration. 


The Connection Type dialog appears. 
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% New Connection 


Connection Type 


Please select connection type. 


Wind River OCD ICE Connection 

Wind River OCD ISS Connection 

Wind River OCD Probe Connection 

Wind River VxWorks 6,x Core Dump Connection 
Wind River ¥xWorks 6.x Simulator Connection 


2. Choose Wind River VxWorks 6.x Target Server Connection. 


NOTE: The Transparent Mode Driver is not currently supported for Linux. 


3. Click Next. 


The Connection Settings dialog appears. 
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“W) New Connection 


Target Server Connection 


@ Please enter a valid target hostname or IP-address. 


Back End Settings 
Back End; wdbrpe v| CPU; | (default From target) 


Target Name / IP Address: | 


Kernel Image 
© File Path from Target (IF Available) 


OFile: 


{_] Bypass checksum comparison 


Advanced Target Server Options 
Verbose target server output 


Options; | R Ci iworkbench2.4 {workspace -RW -4 


Command Line 
| tgtsvr -¥ -R C:/workbench2.4/workspace -RiW -& 


4. Set the Back End field to wdbrpc. 


5. Inthe Name/IP Address field, enter the IP address of your Wind River ICE SX 
unit. (Make sure you use the IP address of the ICE, and not the IP address of 
your target.) 


For information on assigning an IP address to your ICE unit, see the 
Wind River ICE SX for Wind River Workbench Hardware Reference. 


6. Click Next. 
The Memory Options dialog appears. 
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“) New Connection 


Memory Options 


Specify the memory options for the target cpu. 


Available CPUfs) on target board: 


Memory mapping 


Offset Attributes 


Undefined memory areas accessible 


Cancel 


The Memory Options dialog is only necessary for Linux or other 
non-VxWorks target operating systems, so leave the settings at their defaults 
and click Next. 


The Object Path Mappings dialog appears. 
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W, New Connection 


Object Path Mappings 


Specify how files in the target file system are visible in the host file 
system 


Available CPL(s) on Target Board; (default from baroet 


Load module symbols to debug server automatically if possible 


Pathname Prefix Mappings: 


Target Path Host Path 
oothos <5 


é path unchanged> 


< 
Basename Mappings: 
| (*s*.unstripped],[*}*] 


Use this dialog to make sure your pathnames are mapped correctly. To change 
the pathname mappings, use the Add, Edit and Remove buttons. 


7. Click Next. 
The Target State Refresh dialog appears. 
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“W) New Connection 


Target State Refresh 


Configure the core(s) target states refresh settings. 


Available CPUs) on Target Board: 


Initial Target State Query Settings 
Query target object lists and target object states on connect 
(_] Query target object state(s) on stopped events 


(| Query target object state(s) on running events (receiving object only) 


Target State Refresh Settings 
@)Refresh the target state manually only 
O Auto-refresh the target state periodically 


Listen to execution context life-cycle events (context-start, context-exit) 


Life-cycle events are provided for all execution contexts! 


Help | < Back Next > Finish Cancel 


8. Use this dialog to specify the target state query and target state refresh 
parameters. 


9. Click Next. 
The Default Breakpoint Options dialog appears. 
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WW) New Connection 


Default Breakpoint Options 


Select the default breakpoint options for newly created breakpoints. 


Available CPU(s) on target board: Peo 750r> 


Default Breakpoint Stop Scope 
O>Stop all 
© Stop triggering thread 


Cancel 


Use this dialog to set default breakpoint options for newly created 
breakpoints. 


10. Click Next. 


A connection summary appears. 
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New Connection 


Connection Summary 


Please review the connection information 


Connection name: | tgt_255,.23.2.43 


Summary 


Property Value 
DEVICE WTX_VRWORKS. 
NAME_MAPPING [*;*.unstripped],[*;*] 
PATH_MAPPING [boothost:; Jd, [/tatsvr};C: \workbench2. 4yworks 
isFetchTargetStateOnRun False 
isFetchTargetStateOnStor False 
targetStateUpdateStratec manual 


Immediately connect to target if possible 


11. Check the summary to be sure your settings are correct and click Finish. 


You are returned to the Device Debug perspective. The target server 
connection is now visible as a target name in the Target Manager view. 


NOTE: If you do not want to connect to your target now, uncheck the Immediately 
connect to target if possible box. You can connect to your target at any time by 
right-clicking on the target name in the Target Manager view and selecting 
Connect. 
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11.5 Moving On 


Once the target server has been launched successfully, you can use any of the 
Wind River Workbench tools. Workbench operates in the same fashion regardless 
of whether the WDB connection is serial, Ethernet, or the Transparent Mode 
Driver. The only difference you may notice when the Transparent Mode Driver is 
in use is the speed, which is due to limitations on the BDM/JTAG/EJTAG 
connection type. 


For information on Workbench tools, see the Wind River Workbench User’s Guide. 
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12.1 Overview 


Internal software trace is only supported for PowerPC 85xx, PowerPC 86xx, and 
PA Semi PA6T-1682M processors. This chapter applies only to the PowerPC 85xx 
and 86xx and the PA Semi PA6T-1682M. 


Internal trace captures a snapshot of your executing code to a memory array, at full 
speed. It saves up to hundreds of thousands of machine cycles, displaying 
addresses and instructions; PPC 85xx and 86xx also display transferred data. 
Wind River Workbench translates raw machine cycles to assembly code or C/C++ 
statements, and displays them in the Trace view. 


Workbench captures only memory cycles, and may not reflect what the core 
actually executes, especially if cache is enabled. 


Wind River Workbench starts and stops trace collection based on user-defined 
triggering mechanisms. 
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12.2 The Trace View 


To open the Trace view, select Window > Show View > Trace View. 
The Trace view appears, unpopulated. 
The Trace view has two fields: the Events field and the Trace field. 


The Events field shows the trace buffer. When code runs, the Events field shows 
the start of trace and the end of trace. It also displays the type of trace event. 


For PPC 85xx and 86xx processors, the Trace field has five columns, from left to 
right: Event Occurrences (unlabeled), Address, Abs Time, DEL Time, and 
Instruction (unlabeled.) For PA Semi PA6T-1682M processors, the Trace field is the 
same except that it does not use the Abs Time and DEL Time columns. 


The Event Occurrences column shows the type of trace event. 
The Address column shows the address or line number of the trace event. 


The Abs Time column shows the absolute time, that is, the elapsed time since the 
beginning of trace. 


The DEL Time column shows the delta time, that is, the change in absolute time 
since the last trace entry. 


The Instruction column shows the executed instructions. To set the code display, 
right-click in the Instruction field and select Show Code Level. From the list of 
options, select Functions, Source, or Disassembly. 


12.2.1 Trace View Buttons 


The buttons in the Trace view have the following functions: 


Collapsing and Expanding Fields 


The first four columns in the Trace field (or the first two columns for PA Semi 
PA6T-1682M processors, which do not use the Abs Time and DEL Time columns) 
can be collapsed or expanded using the four toggle buttons in the Trace view, as 
shown in Figure 12-1. 
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Figure 12-1 Trace Toggle Buttons 
F o—_— 
| il] | @ |e 


oggle Delta Timestamp Bar 


Toggle Absolute Timestamp Bar 


oggle Address Bar 


Toggle Event Bar 


To collapse any column, click on the toggle button for that field. To re-expand it, 
click on the toggle button again. 


The Instruction column cannot be collapsed. 


Toggle Trace/Source view Auto-Sync 


Click this button to set the Workbench editor to align itself with any highlighted 
instruction in the instruction field in the Trace view. With this button toggled, 
clicking on a function in the Trace view will cause the editor to jump to that 
function. To un-sync the Trace view and the editor, click the button again. 


Clear Trace Buffer 


Clear the trace buffer so that previously stored trace data is not included in the next 
trace that appears. Whenever you add new code, or manually alter the Program 
Counter value, you should clear the trace buffer before running or stepping, to 
prevent errors from occurring due to old trace data in the buffer. The button can 
also be used to trace individual functions by clearing the buffer and then stepping 
over the function. 


The button does not actually flush the trace buffer; it just moves the pointer to the 
beginning of the buffer, so any previous data is overwritten. 
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Refresh Trace View 


Click this button to refresh the entire Trace view, including the Events field. 
Refresh the Trace view to display the newest good information. 


Open Trace Rules Dialog 


Click this button to open the Trace Rules dialog, as shown in Figure 12-2. 


Figure 12-2 Trace Rules Dialog 
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Use the Trace Rules dialog to create a trace rules file, for cases where the code is 
not running in the address range of the download file specified in the Reset and 
Download view, such as an interrupt service routine in flash. 


To create a trace rules file, use the following steps: 


1. Click Add Rule. 


Add Rule 


Relocatable Code/Data Rule Definitions 

Memory Type core 
Start Address 

End Address 


coe_| 


In the Memory Type field, select CODE (for executable code) or DATA. 
In the Start Address field, enter the memory address you want trace to begin. 
In the End Address field, enter the memory address you want trace to end. 


Click Save Rules. 


On: ee 


In the browser window that opens, specify a location and name for your rules 
file. Rules files must be saved as ASCII files with the extension .rulesconf. 


Next, use the ASCII file you have just created to generate a binary file using the 
following steps: 


1. Click Upload File. 


2. Inthe browser window that opens, specify a location and name for your binary 
file and click Open. Workbench will save the binary file with the extension .elf. 


If you already have an existing trace.elf file, you can click Upload/Append 
File to append the new rule you just created to the end of the existing file. 
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11. 
The 


Click OK to close the Trace Rules dialog. 


In the Target Manager view, right-click on your target connection name and 
select OCD Reset and Download. 


The Reset and Download view appears. 
Select the Files tab. 
Click Add Files. 


In the browser window that appears, navigate to the trace.elf file you have just 
created and click Open. 


The trace.elf file appears in the file list. 


Uncheck the Download and Load Symbols fields. Leave the Verify field set to 
None. 


Click Debug. 


trace rules are now added to your project. 


Filter Visible Trace Events 


Filtered trace is not supported for internal software trace. 


Save Output to File 


This button opens a browser window. Use the browser to specify a file to which 
you can save the information in the Trace view. 


This button saves the information from all columns in the Trace field (three or five, 
depending on which processor family you are connected to). It does not save 
information from the Events field. 
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12.3 Configuring Trace 


To configure trace-specific configuration options, click the Configure Trace button. 
The Configure Trace dialog opens, showing the available options for your target 
processor. 


12.3.1 PowerPC Trace Configuration Options 


If you are connected to a PPC 85xx or 86xx processor, the Configure Trace dialog 
opens showing the following options. 


Figure 12-3 Internal Trace Options for PowerPC 


Trace Configuration 
@ Retrieving Current Settings... 


Available Trace Subsystems 


internal Trace 


Trace Configuration Trace System Status 
Trace Mode Enabled 


All valid cycles 


Stop Condition 
Buffer is Full 


Start Condition 


Armed Immediately 


Clear Trace On Go Match Criteria 
Enabled Target ID 
Boot Sequencer y | CJEnable 


Source ID 


Boot Sequencer v | LJEnable 


Transaction Type 


Atomic Clear v | LJEnable 


Source Type 


|Coherency Module 
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Trace Configuration 


Trace Mode 


Select the Trace Mode to determine whether to trace every valid cycle, or only trace 
when the event is matched: 


« All Valid Cycles -- Capture any valid bus cycle regardless of what the Match 
Criteria is set to. 


« ‘Trace Event is detected -- Capture only those cycles that match the Match 
Criteria. 


If you set up any of the fields in the Match Criteria, use Trace Event is detected. 


Start Condition 
Select the start condition to determine when to start the Trace Buffer capture: 


« Arm Immediately -- This option starts trace captures as soon as the target 
starts. 


« _Watchpoint Monitor event is detected -- Start trace capture only when a 
Watchpoint Monitor event occurs. 


« Trace Buffer Event is detected -- Start trace capture only when a Trace Buffer 
Event occurs. 


« Performance Monitor signal overflow -- Start trace capture when 
performance monitors overflow (an internal signal indicates that a counter 
overflow has happened). 


« TRIG_IN transitions from 0 to 1 -- Start capture when TRIG_IN signal goes 
from 0 to 1. 


« TRIG_IN transitions from 1 to 0 -- Start capture when TRIG_IN signal goes 
from 1 to 0. 


« Current context ID = Programmed context ID -- Start trace capture when the 
programmed context ID register is equal to the current context ID. 


« Current context ID != Programmed context ID -- Start trace capture when the 
programmed context ID register is not equal to the current context ID. 


Stop Condition 
Select a Stop Condition to determine when to stop capturing trace. 


« Trace Buffer is Full -- Stop trace capture when it reaches the end of the buffer. 
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« Watchpoint monitor event is detected -- Stop capturing any trace when the 
Watchpoint monitor event is matched. 


« Trace Buffer Event is detected -- Stop capturing trace when a trace buffer 
event is matched. 


« Performance Monitor signal overflow -- Stop capturing trace when 
performance monitors overflow (an internal signal indicates that a counter 
overflow has happened). 


« TRIG_IN transitions from 0 to 1 -- Stop capture when TRIG_IN signal goes 
from 0 to 1. 


« TRIG_IN transitions from 1 to 0 -- Stop capture when TRIG_IN signal goes 
from 1 to 0. 


« Current context ID = Programmed context ID -- Stop trace capture when the 
programmed context ID register is equal to the current context ID. 


* Current context ID != Programmed context ID -- Stop trace capture when the 
programmed context ID register is not equal to the current context ID. 


Clear Trace On GO 


Use this parameter to control where to start saving trace data in the trace memory 
on a GO command. The trace clear settings YES and NO determine where to start 
saving the trace data in the trace memory, as explained below. 


= YES — When a GO command is issued, the trace data will be stored in trace 
memory starting at the first trace memory location. All previously stored trace 
data will be overwritten and lost. All newly captured trace data will be stored 
starting at the beginning of the trace memory. 


»= NO — When GO command is issued, the trace data will be stored in trace 
memory starting at the next trace memory location. All previously stored trace 
data will not be overwritten. All newly captured trace data will be stored 
starting at the next trace memory location. 


Source Type 


« Coherency Module -- This is the default trace source after the processor reset. 
It provides all the activities on the local bus and the snoop cycles between the 
core and the L2 cache. 


« DDR SDRAM -- This is similar to the Coherency Module, except without 
snoop cycles. 


= PCI -- Select the trace source of the PCI/PCI-X output interface. 
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Rapid IO -- Select the internal Rapid I/O outbound interface for the trace 
source. 


Trace System Status 


Use this parameter to control the acquiring of trace data to the trace memory ona 
GO command. The trace data will also be acquired when stepping, running to a PC 
value, or running back to a calling function. The trace acquire settings ENABLE and 
DISABLE determine when the trace memory will acquire trace data on a GO 
command, as follows: 


ENABLE — When a GO command is issued, all trace data will be acquired and 
saved in the trace memory. 


DISABLE — When a GO command is issued, no trace data will be acquired and 
saved in the trace memory. 


Match Criteria 


Address with Mask -- This option will filter the Trace Buffer by matching only 
the correct address with the address mask. For an instruction fetch bus cycle, 
the address will appears in the form 0x0, 0x20, 0x40 and the memory variable 
address will shows up as it is. In order to capture the correct address (with 
mask), an instruction fetch address has to be entered as 0x0, 0x20, 0x40 and the 
memory cycle’s address can be entered without any adjustment. 


Transaction Type -- This option will filter trace capture by matching only the 
correct transaction type. The transaction types are different when the trace 
source changes. A different set of drop down menu will appear when the trace 
source changes. 


Source ID -- Selecting the Source ID field will capture only the matched cycle 
with the same Source ID. This ID indicates the source of this cycle. 


Target ID -- Selecting the Target ID field will capture only the matched cycle 
with the same Target ID. This ID indicates the destination of this cycle. 


12.3.2 PA Semi Trace Configuration 


If you are connected to a PA Semi PA6T-1682M processor, the Configure Trace 
dialog opens showing the following options. 
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Figure 12-4 Internal Trace Configuration for PA Semi 


Trace Configuration 


Available Trace Subsystems 


HInternal Trace 


Value To Filter On Filter On Instruction PC Capture Mode 


‘oxooooo000 | 


'No Filter on Instruction ‘64 bit 


Trace System Status Trace Until Buffer Full Trace Source 


‘Disabled v ‘off |Pc Retire Trace 


Log Branches Only 
| OFF v 


Cancel 


Available Trace Subsystems 


The only available trace subsystem is Internal Trace. 


Filter on Execution 


Use this field to set Workbench to enable or disable trace when a particular 
instruction is executed. By default this field is set to No Filter on Instruction. If you 
set it to Enable on Instruction or Disable on Instruction, you must enter the 
address of the instruction in the Value to Filter On field. 


Value to Filter On 


If you have set the Filter on Execution field to No Filter on Instruction, ignore this 
field. If you have set the Filter on Execution field to Enable on Instruction or 
Disable on Instruction, use this field to specify the address of the instruction you 
want to use. 
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PC Capture Mode 
Use this field to specify whether Workbench should output captured trace as 32-bit 
or 64-bit values. 

Trace System Status 


Use this field to control the acquiring of trace data to the trace memory on a GO 
command. The trace data will also be acquired when stepping, running to a PC 
value, or running back to a calling function. The trace acquire settings Enabled and 
Disabled determine when the trace memory will acquire trace data on a GO 
command, as follows: 


« Enabled — When a GO command is issued, all trace data will be acquired and 
saved in the trace memory. 


« Disabled — When a GO command is issued, no trace data will be acquired and 
saved in the trace memory. 
Trace Until Buffer Full 


Set this option to On to set Workbench to stop capturing trace when the trace buffer 
is full. If this option is set to Off, Workbench continues to capture trace when the 
trace buffer is full, overwriting the contents of the trace buffer with the newly 
captured trace. 

Trace Source 
« PC Retire Trace - Select the PCI/PCI-X output interface for the trace source. 
« Connexium Bus Trace - Select the Pa Semi Connexium bus for the trace source 
« Rapid IO Trace - Select the internal Rapid I/O outbound interface for the trace 

source. 


Log Branches Only 


When this option is set to Off (the default) the processor outputs all instructions. 
When this option is set to On, the processor outputs only on branch instructions. 


230 


12 Internal Software Trace 
12.4 Tracing Execution 


12.4 Tracing Execution 


You must have downloaded your code to Workbench, either by using the 
Workbench project management facility or by using the Reset and Download 
view, before you can begin to trace code. 


12.4.1 Setting a Tracepoint 


Next, set a tracepoint in your code. 


If no tracepoints are set, The trace will contain all code up to the point where the 
target was suspended, either manually or by hitting a breakpoint. 


To set a tracepoint, right-click to the left of the editor (in the gutter) and select 
Tracepoints > Add Tracepoint. 


The Line Tracepoint dialog appears. The options shown in the Line Tracepoint 
dialog (After Trace Counter, Post Trigger Counter, and so on) are not supported for 
internal trace. 


12.4.2 Tracing Execution 


Having specified your tracepoint in the Line Tracepoint dialog, click OK. 


Workbench sets the tracepoint in your code, placing a trace icon in the editor. An 
entry for the tracepoint appears in the Breakpoints view. 


In the Debug view, click Resume. Let some code execute and then click Suspend. 
In the Trace view, click Refresh View. 


Trace information appears in the Trace view, as shown in Figure 12-5. 
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Figure 12-5 Trace View 


Tasks | Problems Properties Build Console | Error Log | Terminal 0 B trace X OCD Command Shell OCD Console | =m) 


BOCES 


Events Address ABS Time DEL Time 


Trace Buffer 0 0.000 ns 0.000 ns ifdef PowerPC 
~ Start of Trace 1498 0.000 ns 0.000 ns movea.l #0,a6 
End of Trace Ox20000400 0.000 ns 0.000 ns movea.1 #0x20002800, a7 
@ oxoo000010 Ox20000406 0.000 ns 0.000 ns movea.1 #0,a6 
A 186447760315.000 ns 1498 60.594 s 60.594 s movea.l #_ SP_INIT,sp 
Ox20000400 60.594 s 60.594 s movea.1 #0x20002800, a7 
1499 0.000 ns 0.000 ns movea.l #0,a6 
O0x20000406 0.000 ns 0.000 ns movea.1 #0,a6 
1498 183.763 s 183.763 s movea.l #  SP_INIT,sp 
Ox20000400 183.763 s 183.763 s movea.1 #0x20002800, a7 


(In Figure 12-5, the Event Occurrences column is collapsed to make it easier to read 
the information in the Instruction field.) 


232 


13 


Using the CF Options View 
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13.4 Changing CF Options in the CF Options View 240 
13.5 Changing CF Options With Low-Level Commands 241 
13.6 Resetting CF Options 242 


13.1 Introduction 


Wind River emulators can be configured in several different ways to specify 
various settings such as electrical properties, connection logic, and clock rate. To 
configure these settings Workbench uses configuration options, or CF options, which 
you can set in the CF Options view. 


This chapter provides a tutorial for configuring a target connection using CF 


options. 


What CF options are available depends on the target processor, and also on 
whether you connect with a Wind River Probe or Wind River ICE SX. For a full 
description of all Wind River CF options sorted by processor family, see the Wind 
River Workbench for On-Chip Debugging Configuration Options Reference. 
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13.2 Connecting to a Target 


In order to configure CF options, you must have an active target connection. 


This tutorial uses a Wind River Probe emulator connected to a Wind River 
PPMC750FX target. 


To connect to your target, use the following steps: 


1. Launch Wind River Workbench according to the method for your host. 


Linux/Solaris Hosts 
From your installation directory, issue the command 
$ ./startWorkbench.sh 
Windows Hosts 
Select Start > All Programs > Wind River > Wind River Workbench version. 


On Windows hosts, Workbench prompts you to specify a workspace location. 
Linux/Solaris hosts use the default location installDir/workspace. 


When Workbench opens, he Quick Target Launch dialog appears. 


Wind River On Chip Debugging 
@ Choose How You Want to Start 


— Defined Launches 
Create a mew launch configuration 
a4) 


Edit an existing launch configuration 
Connect, Attach, Reset and Download 


Sync with target and download symbols: 


Do nat show this dialog on startup. 


2. Select Create anew launch Configuration. 
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The Connection Type dialog appears. 


W New Connection 


Connection Type 


Please select connection type. 


Wind River OCD ICE Connection 

Wind River OCD 155 Connection 

Wind River OCD Probe Connection 

Wind River VxWorks 6.x Core Dump Connection 
Wind River VxWorks 6.x Simulator Connection 
Wind River ¥xWorks 6.x Target Server Connection 


3. Select Wind River OCD Probe Connection and click Next. 


The Processor Selection dialog appears. 
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“W) New Connection 


Wind River Probe Settings 


Configure the designator settings for the emulator. 


Designators 


@Processor: | PPC750FX 


© Board file: 


y¥  Designator Processor Processor Plugin 
MM PPC?SOFX PPC?SOFX PowerPC 7xx Family Process... 


Auto-attach to connected designators 


Communications 


USB Device Name: | PRO40310 


4. Click Select. From the list that appears, expand MPC7xx and select PPC750FX. 
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“) Processor Selection 


Current Connection - Wind River Probe : PPC750F 


) MPC6xx 

+) MPC#4xx 

) MPCFxx 
MPC?740 
MPC?45 
MPC?7S0 
MPC?SS 
PPC740 
PPC745 
PPC?7S0 
PPC7SOCK 
PPC7SOCXE 
PPC7SOCKR 
PPC?SOGX 
ppr7sni 


v 


5. Make sure the Auto-attach to connected designators checkbox is selected and 
click OK. 


You are returned to the Processor Selection dialog. 
6. Click Next. 


7. The connection wizard passes through a number of screens that you do not 
need to configure for this tutorial. Leave all settings at their defaults and click 
Next until you come to the Connection Summary. 
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“W) New Connection 


Connection Summary 


Please review the connection information 


Connection name: | WRProbe_PPC?SO0FX_0 


Summary 


Property Value 
ADDR PRO40310 
AutoAttachConnectedCon true 

+ DESIGNATORMAP 
DEVICE Wind River Probe 
NAME_MAPPING [*;*.unstripped],[*;*] 
PATH_MAPPING (Jd 
STYLE USBDEVICE 


Immediately connect to target if possible 


Finish Cancel 


8. Make sure that the Immediately connect to target if possible checkbox is 
selected and click Finish. 


Workbench creates a target connection called WRProbe_PPC750FX in the 
Target Manager view and opens the Reset and Download view. 


9. You do not need to download code to configure the target connection, so click 
Close to close the Reset and Download view. 


13.3 Configuring the Target Connection 


In the Workbench toolbar, select Window > Show View > CF Options. 
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OCD Comman... Binary Upload ts) co Options 


OCD Statistica... Hardware Dia... | Cache Trace Flash Program... 


VECTOR 
RST 

TAR 

SLAVE 
SLIMMRVAL 
RTP 
LENDIAN 
MODE 

DLD 
HRESET 
PAR 
TGTCONS 
TRESET 
IN¥CI 
SPOWER 
RESET 
TRPEXP 
INCOLD 
L2WARNING 


No 

NO 

64 
NORMAL 
ENABLE 
No 

BDM 
ACTIVE 
YES 

YES 
HRESET 
YES 

NO 

NO 
DISABLE 
DISABLE 
BRKREP 
DISABLE 
16 


[HIGH, LOW, IGNORE] 
[YES, NO, HALT, RUN] 


[AUTO, 603E, EC603E, 603... 


[NONE, 8260] 
[AUTO, YALUE] 
[¥ES, NO] 

[¥ES, NO] 

(32, 64] 

[NORMAL, 8] 
[ENABLE, DISABLE] 
[¥ES, NO] 

[BDM, Com1, COM2] 
[OPENC, ACTIVE] 
[¥ES, NO] 

[¥ES, NO] 


[HRESET, SRESET, HRESET... 
[YES, NO, SOI, BREAKPOIN... 


[¥ES, NO] 

[¥ES, NO] 

(ENABLE, DISABLE] 
(ENABLE, DISABLE] 
[REPONLY, BRKREP] 
(ENABLE, DISABLE] 
[0.025,..100,AUTOT 


Yector Table Location 
Monitor Target reset 

Target CPU 

Target CPU SLAYE } 

Slave IMMR reset value 

Real time Preservation 

Little Endian Mode 

Processor Mode 

Download Mode 

Emulator HRESET Control 
Data Parity Checking 

Target Console Redirection 
Drive TReset line 

Invalidate Instruction Cach... 
Sense Power via HRESET 
CPU Reset Type 

Trap exception 

Issue an IN on coldstart 
Display L2 Data Cache War... 
Memory Management Unit ... 
Load Boot Table On IN 
Trigger In Report Mode 

TMD Mode 


____JTAG clock rate (MHz) _ 


The CF Options view opens, populated with the available CF options for your 
emulator and target processor. 


The CF Options view has four columns: Command Name, Current Setting, 
Parameters, and Description. An example entry is shown below: 


Command Name Current Setting Parameters Description 


INCOLD NO [YES, NO] Issue an IN on coldstart 


Command Name shows the argument associated with this option for the low-level 
CF command in the OCD Command Shell. 


Current Settings shows the value to which the option is currently set. 
Parameters shows the available range of values to which you can set the option. 


Description shows a description of the configuration option. 
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13.4 Changing CF Options in the CF Options View 


To change the value of a CF option in the CF Options view, use the following steps. 


1. Highlight any CF option and click on its entry in the Current Settings column. 


A drop-down list appears. 


OCD Comman... Binary Upload OCD Statistica... Hardware Dia... Cache Trace Flash Program...) ~ C1 
Boos 
Command Name Current Setting Parameters Description “« 
SB 5B (5B, IHBC] Set BreakPoint 
VECTOR Low [HIGH, LOW, IGNORE] Vector Table Location 
RST YES (YES, NO, HALT, RUN] Monitor Target reset 
TAR 7SOFX (AUTO, 603E, EC603E, 603... Target CPU 
SLAVE NONE [NONE, 8260] Target CPL( SLAVE ) 
SLIMMRVAL AUTO (AUTO, ¥ALUE] Slave IMMR reset value 
RTP No (YES, NO] Real time Preservation 
LENDIAN NO (YES, NO] Little Endian Mode 
MODE 64 (32, 64] Processor Mode = 
DLD NORMAL [NORMAL, 8] Download Mode 
HRESET ENABLE (ENABLE, DISABLE] Emulator HRESET Control 
PAR No (YES, NO] Data Parity Checking 
TGTCONS BDM [BDM, COM1, COM2] Target Console Redirection 
TRESET ACTIVE [OPENC, ACTIVE] Drive TReset line 
INVCI YES (YES, NO] Invalidate Instruction Cach... 
SPOWER YES [VES, NO] Sense Power via HRESET 
RESET HRESET [HRESET, SRESET, HRESET... CPU Reset Type 
TRPEXP YES [ N Trap exception 7 
as 6 Issue an IN on coldstart 
YES, NO] Display L2 Data Cache War... 
MMU NO (ENABLE, DISABLE] Memory Management Unit ... 
BL DISABLE (ENABLE, DISABLE] Load Boot Table On IN 
BRKREP BRKREP [REPONLY, BRKREP] Trigger In Report Made 
TD DISABLE (ENABLE, DISABLE] TMD Mode 
CLK 16 [0.025,,,100,4UTO] JTAG clock rate (MHz) me 


2. Inthe drop-down list, choose the value you want and click on it to reset the CF 


option. 


For example, suppose you want the emulator to send an IN initialization 


command to the target on every cold start. By default this option is set to NO. 


a. Inthe Description column, find Issue an IN on coldstart. 


b. Highlight that CF option and click the Current Settings column. 


c. A drop-down list of available values (in this case NO and YES) appears. 


d. Select YES to enable the option. 


3. Repeat these steps for any CF options you wish to change. 
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13.5 Changing CF Options With Low-Level Commands 


4. After you have set all the CF options you want to set, click the Send All CF 


Options to Target button. 


NOTE: Setting CF options in the CF options view does not immediately make 
changes to the target connection. Your changes do not take effect until you issue a 
target reset, either by using the Send All CF Options to Target button in the CF 
Options view or by issuing an IN or INN command in the OCD Command Shell. 


13.5 Changing CF Options With Low-Level Commands 


You can also work with configuration options by using the CF command in the 
OCD Command Shell. At a >BKM> or >ERR> prompt, enter the command CF. This 
will bring up a list of your emulator’s configuration options. 


>BKM>c£ 
Set BreakPoint SB[SB,IHBC] = SB 
Vector Table Location VECTOR [HIGH, LOW, IGNORE] = LOW 
Monitor Target reset RST[YES,NO,HALT,RUN] = YES 
Target CPU TAR [AUTO, 603E, EC603E, 603P, 603R,740,745, 
750,750CX, 750CXE, 750FX,750GX,755,7400,7410] = 750FX 
Target CPU( SLAVE ) SLAVE [NONE, 8260] = NONE 
Slave IMMR reset value SLIMMRVAL [AUTO, VALUE] = AUTO 
JTAG clock rate (MHz) CLK[0.025...100,AUTO] = 16 
Application IMMR Exclusion Range AIMMRER[OFF,START and END] = OFF 
Application IMMR Value AIMMRVAL [VALUE] = 0e000000 
Real time Preservation RTP[YES,NO] = NO 
Little Endian Mode LENDIAN[YES,NO] = NO 
Processor Mode MODE[32,64] = 64 
Download Mode DLD[NORMAL,8] = NORMAL 
Emulator HRESET Control HRESET [ENABLE, DISABLE] = ENABLE 
Data Parity Checking PAR[YES,NO] = NO 
Set Work Space WSPACE[BASE and SIZE] = 00000000 174c 
Set Stack Range STACK[OFF / LOWER and UPPER] = OFF 
Target Console Redirection TGTCONS [BDM, COM1,COM2] = BDM 
Drive TReset line TRESET[OPENC,ACTIVE] = ACTIVE 
Invalidate Instruction Cache on GO INVCI[YES,NO] = YES 
Reset Pulse Length N*1ms RPL[1..2000] = 1 
Sense Power via HRESET SPOWER[YES,NO] = YES 
Power On Reset Length N*1ms PONR[O0..500] = 0 
CPU Reset Type RESET[HRESET, SRESET,HRESET_UNFILTER, SRESET_UNFILTER] = HRESET 
Trap exception TRPEXP[YES,NO,SOI,BREAKPOINTONLY] = YES 
Issue an IN on coldstart INCOLD[YES,NO] = NO 
Display L2 Data Cache Warning L2WARNING[YES,NO] = NO 
Memory Management Unit Mode MMU [ENABLE,DISABLE] = DISABLE 
Load Boot Table On IN BL[ENABLE, DISABLE] = DISABLE 
Trigger In Report Mode BRKREP[REPONLY,BRKREP] = BRKREP 
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TMD Mode TMD [ENABLE, DISABLE] = DISABLE 
Run Counter Length RCL[1000..FFFF] = 1000 
Delay after Reset Nms DRST[O..10000] = 25 
>BKM> 


Change any CF option using the syntax 

CF CommandName Value 

CommandName is the name given in the Command Name column in the CF 
Options view. 


Value is the value you wish to change to. 


For example, to set the emulator to send an IN initialization command to the target 
on every cold start, enter the command 


>BKM>cf£ incold yes 


Enter the CF command again to see your changes. 


NOTE: Setting CF options with the CF command does not immediately make 
changes to the target connection. Your changes do not take effect until you issue a 
target reset, either by using the Send All CF Options to Target button in the CF 
Options view or by issuing an IN or INN command in the OCD Command Shell. 


13.6 Resetting CF Options 


To restore all CF options to their target defaults, use the Reset to default target 
settings button in the CF Options view. 
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14.1 Introduction 


The Hardware Diagnostic view provides a set of RAM and bus diagnostics and 
utilities that can be controlled by the emulator or run on the target. For some of the 
tests, you can run code directly on the target instead of through the emulator by 
selecting the Run on Target checkbox. This allows the test to run at the execution 
speed of the target processor. 


This tutorial uses a Wind River Probe emulator connected to a Wind River 
PPMC750FX target. 
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14.2 Connecting to Your Target 


To connect to your target, use the following steps: 


1. Launch Wind River Workbench according to the method for your host. 


Linux/Solaris Hosts 
From your installation directory, issue the command 
$ ./startWorkbench.sh 
Windows Hosts 
Select Start > All Programs > Wind River > Wind River Workbench version. 


On Windows hosts, Workbench prompts you to specify a workspace location. 
Linux/Solaris hosts use the default location installDir/workspace. 


The Quick Target Launch dialog appears. 


Wind River On Chip Debugging 
@ Choose How You Want to Start 


Defined Launches 
Create a new launch configuration 


Edit an existing launch configuration 


Connect, Attach, Reset and Download 


Syne with target and download symbols 


Do nat show this dialog on startup. 


2. Inthe Target Manager view, right-click default(localhost) and select 
New > Connection. 


The Connection Type dialog appears. 
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® New Connection 


Connection Type 


Please select connection type. 


Wind River OCD ICE Connection 

Wind River OCD 155 Connection 

Wind River OCD Probe Connection 
Wind River VxWorks 6.x Core Dump Connection 

Wind River VxWorks 6.x Simulator Connection 

Wind River ¥xWorks 6.x Target Server Connection 


Cancel 


3. Select Wind River OCD Probe Connection and click Next. 


The Processor Selection dialog appears. 


“W) New Connection 


Wind River Probe Settings 


Configure the designator settings for the emulator. 


Designators 


@ Processor: | PPC750F% | 


O Board file: are 


¥  Designator Processor Processor Plugin 
¥| PPC?5O0FX PPC?SOFX PowerPC 7xx Family Process... 


Auto-attach to connected designators 


Communications 


USB Device Name; PRO40310 
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4. Click Select. From the list that appears, expand MPC7xx and select PPC750FX. 


‘W) Processor Selection 


Current Connection - Wind River Probe : PPC750F 


+) MPC6xx 

) MPC#4xx 

| MPC? xx 
MPC?740 
MPC?45 
MPC?7S0 
MPC?SS 
PPC740 
PPC745 
PPC?7S0 
PPC?SOCK 
PPC?SOCXE 
PPC7SOCKR 
PPC7SOGX 
ppc7sni 


| 


5. Make sure the Auto-attach to connected designators checkbox is selected and 
click OK. 


You are returned to the Processor Selection dialog. 
6. Click Next. 


7. The connection wizard passes through a number of screens that you do not 
need to configure for this tutorial. Leave all settings at their defaults and click 
Next until you come to the Connection Summary. 
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New Connection 


Connection Summary 


Please review the connection information 


Connection name: | \WRProbe_PPC7SOFX_0 


Summary 


Property Value 
ADDR PRO40310 
AutoAttachConnectedCon true 

+) DESIGNATORMAP 
DEVICE Wind River Probe 
NAME_MAPPING [*;* unstripped],[*;*] 
PATH_MAPPING (Jd 
STYLE USBDEVICE 


Immediately connect to target if possible 


Make sure that the Immediately connect to target if possible checkbox is 
selected and click Finish. 


Workbench creates a target connection called WRProbe_PPC750FX in the 
Target Manager view and opens the Reset and Download view. 


You do not need to download code in order to run hardware diagnostics, so 
click Close to close the Reset and Download view. 
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NOTE: The RAM workspace has no relation to the workspace that Workbench uses 
to store project information. 


The RAM workspace is an area of RAM on the target that the emulator uses to 
download the hardware diagnostic routines and flash programming algorithms. 
You must tell your emulator where writable RAM is located on your target for this 


purpose. 


NOTE: Setting a RAM workspace is only necessary if you are running the 
diagnostics on the target. If you do not select the Run on Target checkbox, you do 
not need to set a RAM workspace. Tests run on the target are slower, so if you select 
the Run on Target checkbox, make sure you specify a small area of memory to be 
tested. 


Depending on the device family and type, this space is limited to under 2 KB. Note 
that more memory improves the speed of programming. 


To configure the workspace, enter the parameters in the OCD Command Shell, 
using the syntax 


CF WSPACE base size 


where base is the start address, and size is the minimum number of bytes of target 
RAM required. 


To find the base and size values for a Wind River-supported target, consult your 
target’s target.ref file, located in installDir/vxworks-6.x/target/config/yourTarget. 
Alternatively, consult your processor documentation. 


For example, on a Wind River PPC750FX target, the base of the workspace is 
00000000 and the size is 1770. To set the workspace, in the OCD Command Shell 
enter the command 


>BKM>cf£ wspace 0 1770 


This sets the workspace at address 0 with a size of 1770 bytes. 
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14.4 Hardware Diagnostic Tests 


To run diagnostic tests on your target, use the following steps. 


14.4.1 Simple RAM Test 


This test writes and reads back a simple pattern to the memory bounded by the 
starting and ending addresses entered in the Start Address and End Address 
fields. If an error occurs, the test stops and the error type and address are displayed 
in the Output field. 


The first diagnostic to be run is a Simple Ram Test on the area of memory used by 
the workspace. 


1. 


-_ 


4 
5. 
6 
7 


In the Workbench toolbar, select Window > Show View > Hardware 
Diagnostics. 


In the Diagnostic field, select Simple RAM Test — Single Pass. 


The workspace cannot be used to test itself, so make sure the Run on target 
checkbox is unchecked. 


In the Start Address field, enter 0. 
In the End Address field, enter 1770. 
In the Units field, select LONG. 
Click Run. 


Workbench displays the test result in the Output field. The output of a successful 
test will resemble that in Figure 14-1. 
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Figure 14-1 Successful Simple RAM Test 


OCD Command Shell Binary Upload CF Options OCD Statistical Code Profiling Cache Trace a Hardware Diagnostics * 


Choose Diagnostic Output 


Diagnostic 


simple ram test running 


| Simple RAM test - Single pass test complete 


Description 


The Single RAM Test Single Pass writes and reads back a simple 
pattern to the memory bounded by the starting and ending 
addresses entered in the fields below. IF an error occurs, the test 
stops and the error type and address will be displayed, 


Start address: oxoo000000 
End address: 0x00001770 


Units LONG 


[JRun on target 


If the test fails, the Address Bus Test diagnostic and the Data Bus Test diagnostic 
may determine the cause of the failure; see 14.4.5 Bus Tests, p.253. 


If the RAM test of the memory used by the workspace passed, you can now test the 
rest of the memory in the target system at full bus speed. 


1. Inthe Diagnostic field, select Simple RAM Test - Single Pass. 
2. Select the Run on Target checkbox. 
3. Inthe Start Address field, enter 14000. 
4. Inthe End Address field, enter 20000000. 
5. Inthe Units field, select LONG. 

6. Click Run. 

Workbench displays the test result in the Output field. 

If the message Test Complete appears, then the diagnostic passed. 


If the test fails, try re-seating the SDRAM module and repeat the test. If the test still 
fails, then run the Address Bus Test diagnostic and the Data Bus Test diagnostic 
to determine the cause of the failure. See 14.4.5 Bus Tests, p.253. 
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14.4.2 Full RAM Tests 


A Full RAM test writes a “walking” 1 on each bit of RAM and reads it back. This 
is a very lengthy test and can detect bus configuration errors, typically on a new 
printed circuit board. 


This test sets and then clears each bit to try to locate memory defects bounded by 
the starting and ending addresses entered in the Start Address and End Address 
fields. If an error occurs, the test stops and the error type and address are displayed 
in the Output field. 


NOTE: A complete Full RAM test would take several years to finish, so make sure 
you specify a very small region of memory to be tested. 


Full RAM tests are designed to check for cell disturbance and addressing 
problems. These tests perform the following actions: 


A Single Pass test will run the test only once. A Continuous test will repeat the test 
over the same address until you click Stop. 


1. Inthe Diagnostic field, select Full RAM Test — Single Pass. 
2. Select the Run on Target checkbox. 

3. Inthe Start Address field, enter 14000. 

4. Inthe End Address field, enter 00014100. 
5 

6 


In the Units field, select LONG. 
Click Run. 
Workbench displays the test result in the Output field. 
If the message Test Complete appears, then the diagnostics passed. 


If the test fails, try re-seating the SDRAM module and repeat the test. If the test still 
fails, then run the Address Bus Test diagnostic and the Data Bus Test diagnostic 
to determine the cause of the failure. See 14.4.5 Bus Tests, p.253. 


14.4.3 CRC Calculation 


Workbench and the emulator support the calculation of a Cyclic Redundancy 
Check (CRC) on all addresses in the range specified. The CRC test will checksum 
a block of data on the target for the address range you specify in the CRC 
Calculation dialog. The CRC algorithm is based on the following polynomial: 
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x416 + x4154+x424+1 


Workbench uses this polynomial as follows: 


Workbench reads a location and uses the value read, x, to calculate the CRC. Then 
Workbench adds the result to the value calculated for the previous address. This 
process continues until Workbench has checked the entire specified memory 
range. 


1 
2 
3. 
4 
D 


In the Diagnostic field, select CRC Calculation. 


In the Start Address field, enter the starting address, for example 20000. 


In the End Address field, enter the ending address, for example 21000. 


Set the Units field to BYTE. 
Click Run. 


To interrupt the test, click Stop. 


If communications with the emulator and target are working, Workbench returns 
the CRC sum. 


OCD Command Shell Binary Upload CF Options OCD Statistical Code Profiling Cache Trace i Hardware Diagnostics 


Choose Diagnostic 
Diagnostic 


CRC Calculation 


Description 


The CRC will perform a cyclic redundancy check of the memory 
bounded by the starting and ending addresses entered in the 
fields below based on the following algorithm: (+ X15 + X°2 + 
1). The CRC sum will be returned if the communications with the 
emulator and target are working, The test can be interrupted by 
clicking the stop button, 


Start address: | oxoooz0000 


End address: | oxo0021000 


Units eve OY 


Configure Workspace 
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Output 


CRC-16 test running 
Completed... CRC-16 Yalue = 9375 


14 Using Hardware Diagnostics 
14.4 Hardware Diagnostic Tests 


14.4.4 Scope Tests 


Read From Location 


The Read From Location Scope Test performs a memory read of designated length 
from the address entered in the From Address field. 


Write To Location 


The Write To Location Scope Test performs a memory write of designated length 
of the value entered in the Data Value field to the address in the To Address field. 


Write and Complement 
The Write and Complement Scope Test performs a memory write of designated 


length of the value entered in the Data Value field to the address in the To Address 
field; the value is then complemented. 


Write Rotating Value 
The Write Rotating Value Scope Test performs a memory write of the value 
entered in the Data Value field to the address in the To Address field. The value is 


then rotated through all of the bit positions with respect to the designated length 
of the memory address. 


Write Then Read 


The Write then Read Scope Test performs a memory write of designated length of 
the value entered in the Data Value field to the address in the To Address field; the 
value is then read back. 


14.4.5 Bus Tests 


Address Bus Test 
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This test detects faults in the address bus over the range bounded by the starting 
and ending addresses entered in the Start Address and End Address fields. This 
test can be interrupted by clicking the Abort button. 


This test detects faults in the data bus over the range bounded by the starting and 
ending addresses entered in the Start Address and End Address fields. This test 
can be interrupted by clicking the Abort button. 
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OCD Statistical Code Profiling 


15.1 Introduction 255 

15.2 Connecting to the Target 256 
15.3 Creating a Project 266 

15.4 Profiling Your Code 272 


15.1 Introduction 


The OCD Statistical Code Profiling view provides built-in performance analysis 
and code coverage features that allow you to profile your software’s performance 
and view a symbolic display in chart or histogram format. These features help 
identify system bottlenecks and let you optimize your application software. 


This chapter provides a tutorial for using the OCD Statistical Code Profiling view 
to profile your code. 


To populate the OCD Statistical Code Profiling view, you must have an active 
project and an active target connection. 


This tutorial uses the Wind River Instruction Set Simulator and the C 
Demonstration Program, both of which are included in your Workbench 
installation. 
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15.2 Connecting to the Target 
First, open Workbench according to the method for your host computer. 


Linux/Solaris Hosts 
From your installation directory, issue the command 
$ ./startWorkbench. sh 
Windows Hosts 
Select Start > All Programs > Wind River > Wind River Workbench version. 


On Windows hosts, Workbench prompts you to specify a workspace location. 
Linux/Solaris hosts use the default location installDir/workspace. 


When Workbench opens, the Quick Target Launch dialog appears. 


Wind River On Chip Debugging 
@ Choose How You Want to Start 


Defined Launches 
Create a new launch configuration 


Edit an existing launch configuration 
Connect, Attach, Reset and Download 


Sync with target and download symbols 


Do not show this dialog on startup 


1. Select Create a new launch configuration. 


The Connection Type dialog appears. 
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W, New Connection 


Connection Type 


Please select connection type. 


Wind River Generic GDB Remote Serial Protocol Connection 
Wind River OCD ICE Connection 

Wind River OCD I55 Connection 

Wind River OCD Probe Connection 

Wind River ¥xWorks 6.x Core Dump Connection 

Wind River VxWorks 6.x Simulator Connection 

Wind River VxWorks 6.x Target Server Connection 


2. Select Wind River OCD ISS Connection and click Next. 


The Processor Selection dialog appears. 


257 


Wind River Workbench for On-Chip Debugging 
User Tutorials, 2.6.1 


® New Connection 


Wind River ISS Settings 


Configure the designator settings for the emulator. 


Designators 


@ Processor: [ MPC8260 


O Board file: 


¥  Designator Processor Processor Plugin 
|) mPc8260 MPC8260 PowerPC 82xx/83xx Family Proces 


< 


4uto-attach to connected designators 


3. Click Select. From the list that appears, expand MPC82xx and select 
MPC8260. 
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WW, Processor Selection 


Current Connection - Wind River ISS : MPC8260 


(=) MPC82xx 
MPC8220 
MPC8240 
MPC8241 
MPC8245 
MPC8247 
MPC8248 
MPC8250 
MPC8255 
MPC8264 
MPC8265 
MPC8266 
MPC8270 
MPC8271 
MPC8272 
MPCE27S rv 


4. Make sure the Auto-attach to connected designators checkbox is selected and 
click OK. 


You are returned to the Processor Selection dialog. 
5. Click Next. 


6. The connection wizard passes through a number of screens that you do not 
need to configure for this tutorial. Leave all settings at their defaults and click 
Next until you come to the Connection Summary. 
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“W) New Connection 


Connection Summary 


Please review the connection information 


Connection name: | WRISS_MPC8260 | Shared: (1) 


Summary 


| Property Value 
AutoAttachConnectedCon true 
+ DESIGNATORMAP 
DEVICE Wind River ISS 
NAME_MAPPING [*;*.unstripped], [*;*] 
PATH_MAPPING (Jd 


Immediately connect to target if possible 


@ 


7. Make sure that the Immediately connect to target if possible checkbox is 
selected and click Finish. 


Workbench creates a target connection called WRISS_MPC8260 in the Target 
Manager view. 


NOTE: On Windows hosts, Workbench starts WindISS.exe and opens a 
command shell. Do not close this shell or terminate WindISS.exe while your 
target connection is running. Workbench automatically terminates 
WindISS.exe and closes the shell when you disconnect from the target 
connection. 


The Reset and Download view appears. 
8. Choose how you want to proceed: 


a. If you want to create a project in which to run and debug your code, skip 
the rest of this section and proceed to 15.3 Creating a Project, p.266. 
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b. If you want to run and debug your code without creating a project, 
continue with this section. 


In the Reset and Download view, select the Reset tab. 


Name: | WRISS_MPC8260 - MPC8Z60 


@ Main @ Download @ Instruction Pointer # Run Options ** Projects to Build 17 Source [= Common 
MPC8260 
[_] Play register file 
- Reset LIN - Reset/setup regs ¥| Query Target 
© Specified core 


10. 


11. 


12. 


1e) 


All cores 


Cores tied on reset; 


If you want to configure the target register values with a register file, select 
Play Register File and browse for the file you want to use. 


Register files for many Wind River-supported targets are located in 
installDirlworkbench-2.x/dfw/build/host/registers. 


If you do not want to reconfigure your target registers, leave this box 
unchecked. 


Choose the type of reset initialization you want to perform. 


You can use the IN or INN initialization commands. For a full discussion of 
these two commands, see the Wind River Workbench for On-Chip Debugging 
Command Reference. 


You can also choose not to perform an initialization by clearing the Reset box. 


CAUTION: If you are manually changing registers on your target, be aware that 
issuing an IN or INN initialization command will overwrite your changes. 


Select the Download tab. 
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Name: | WRISS_MPC8260 - MPC8260 


# Main @ Reset Instruction Pointer @#* Run Options ** Projects to Build i Source | =) Common 
Y = 
MPC8260 


File Download Verify Load Symbols = Offset 


13. Click Add Files. 


In the browser window that appears, navigate to the executable file you want 
to run. 


The file you select appears in the Filename field. Repeat this process as many 
times as necessary. 


The file at the top of the list will download to the target first, followed by the 
others from the top down. You can edit the order of the list by clicking on any 
filename to highlight it and using the Up, Down, and Delete buttons. 


14. Use the other fields to configure the download. 


Download 


The Download field is checked by default. If you clear it, the file will remain 
on the list but will not download data to the target. This is useful if, for 
example, you only want to download symbol information and not data. 


Verify 


The Verify field configures the extent to which the file you are downloading 
will be compared to a file that may already be on the target. There are three 
options: Full, Compare, and None. 


When this field is set to Full, a write/read verify will occur for every 
download. Workbench writes to the target and then verifies that the write to 
the target and the read from the target are identical. This is slower than a 
normal download, but it is a useful security option. 
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When the field is set to Compare, Workbench will verify that the image has 
been downloaded correctly (that is, that the image on the host is the same as 
the image on the target.) This is useful for programming flash. 


NOTE: You should only set the Verify field to Compare if an image already 
exists on the target. If you set the field to Compare when there is no image on 
the target, Workbench will look for a file to compare and not find one, and the 
reset and download operation will fail. 


When the field is set to None, Workbench will perform no verification. 


The Verify field is set to None by default. 


Load Symbol 
The Load Symbol field, which is checked by default, determines whether the 
file’s symbol information is downloaded to the target. 

Offset 


In the Offset field, you can enter a value in hex to set a memory offset bias for 
your application file. If you do not enter a value, Workbench uses the default 
value 0x00000000. 


15. Select the Instruction Pointer tab. 


@ Main @ Reset @ Download enya @ Run Options * Projects to Build | Ey Source [=] Common 
MPC8260 


Set instruction pointer after download 


Ouse specified start address in] 


16. Set the starting point for your file. 


By default, the instruction pointer is set to use the starting address from the 
download file. 


You can set the instruction pointer to start the file from the first occurrence of 
a particular symbol (for example, main) or you can just specify a starting 
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17. 


address by entering the address value in hex in the Use Specified Start 
Address field. 


If you do not want to set a starting point, clear the Set Instruction Pointer 
After Download box. 


Select the Run Options tab. 


Main Reset @# Download Instruction Pointer ** Projects to Build '§% Source —) Common 
=I v 


MPC8260 
(O} Do not run 
ORun to address | 


OyRun to end of program 


Oo 


18. 


19. 
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Play post download script 


Determine how you want your file to run. 


By default, the Reset and Download view is set not to run the file after 
downloading. If you want the file to run, you have several options to 
determine where it should break: 


You can set it to break at the first occurrence of a symbol (for example, 
main) by selecting Run to Symbol and entering the symbol in that field. 


You can set it to break at the end of your program by selecting Run to end 
of program. 


You can set it to break at a given memory address by selecting the Run to 
Address box and entering the address in hex in that field. 


You can set it to break at an _exit routine by selecting the Break at Exit box. 


If you need to perform a post-initialization, you can define it here. Select the 
Play post download script box and click Browse. In the browser window that 
appears, navigate to your initialization file. 


Select the Source tab. 


15 OCD Statistical Code Profiling 
15.2 Connecting to the Target 


Name: | WRISS_MPCB260 - MPC8260_ 


@ Main @ Reset @ Download @ Instruction Pointer @#* Run Options ** Projects to Build Ty Source Wea Common 
Source Lookup Path: 


LS Default | 
| 


(|Search for duplicate source files on the path 


20. Use the Source tab to configure the source path of your file. 


Workbench uses the input path of the local file system by default. Unless you 
need to use a different path, you do not need to do anything in the Source tab. 


If you need to use a different path, click Add... and use the Add Source dialog 
to configure the appropriate search path for your project. 


21. Select the Common tab. 


id 


Name: | WRISS_MPC8260 - MPC8260 


@ Main @ Reset @ Download @ Instruction Pointer @# Run Options ** Projects to Build Ey Source [8 Common 


Save as 
@Local file 
OShared file: | | 
Display in Favorites menu Console Encoding 
0 @run © Default (p1252) 
DD ¥ debug Other 


Standard Input and Output 
4llocate Console (necessary For input) 


File: o_ 


Launch in background 


22. Specify whether your launch configuration is local or shared. 
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The configuration is local by default. To make it shared, click Shared file: and 
browse to the shared directory where you want the configuration to be located. 


You have now fully defined your reset and download operation. 
23. Click Debug. 


Workbench initializes the target board, then downloads the file, then runs the 
file. 


The OCD Console view opens to show the progress of the reset and download 
operation. 


Tasks Problems Properties Build Console Error Log TerminalO Trace OCD Command Shell OCD Console X 


Reset and Download 


i 


Testing Communications to Hardware Interface... Passed 

Driving HRESET to be High Passed 

Driving HRESET to be Low.... . Passed 

Waiting HRESET Low Acknowledg ve Passed 

Attempting JTAG communication 7 Passed 

Waiting for HReset to be released nit Passed 

Testing for target STOP State 7 Passed 

Comparing target CPU with CF setting. i Passed 

Waiting for HRESET High Acknowledge. one Passed 

Testing JTAG Communication... jase Passed 

Loading Internal Registers... ‘ Passed 

Testing JTAG Communication... anes Passed 

Getting value of cF mmu option ... ite Passed 

Attempting to restore CPU context Passed 
C:\WindRiver\workspace\c_demo_sa\PPC603diab_DEBUG\cdemo. elf COCO) 
Loading symbols... Completed at Default Offset (<1 sec} 
Specified not to Run 

| * Reset and Download Completed * 


Proceed to 15.4 Profiling Your Code, p.272. 


15.3 Creating a Project 


NOTE: If you do not plan to build or edit your source files within Workbench, skip 
this section and proceed to 15.4 Profiling Your Code, p.272. 


In the Reset and Download view, click Close. 
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To create the C Demonstration Project, use the following steps. 
1. Inthe Workbench toolbar, select File > New > Project. 


The New Project wizard appears. 


% New Project 


Select a wizard 


Creates a new OS-agnostic sample project 


Wizards: 


| type Filter text 

& ¥xWorks 5.5 

& VxWorks 6.x 

& VxWorks 653 

& Wind River Linux 

(& Examples 
(% Native Sample Project 
a 
(@? ¥xWorks 5.5 Downloadable Application Sample Project 
IR} ¥xWorks Downloadable Kernel Module Sample Project 
\P% ¥xWorks Real Time Process Sample Project 
9 Wind River Linux Application Sample Project 
9 Wind River Linux User-Defined Sample Project 


1) FF) 


[| Show All Wizards, 


Cancel 


2. Expand the Examples folder and select Standalone Sample Project. 
3. Click Next. 


A sample project template appears. 
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% New Project Sample 


Sample Project Template 


Select a sample project template. 


Available Examples: Information: 


C Demonstration Program C Demonstration Program 


(C++ Demonstration Program This program demonstrates various C 
[S$ The Ball Demonstration Program language features including structures, 


~ ‘ character arrays, linked lists, and 
1S The Panel Demonstration Program FecursOn: 


You can build and download this program 
to your simulator or target board, The 
default RAM location for the program is 
0x00014000, To change the default 
memory address, edit the simple. lk linker 
command file, 


Features 


The Following Features are demonstrated 
From main(}: 


® Factorials: The FactorialDemot} 
__ function generates 4 factorial table 


4. Select C Demonstration Program and click Finish. 


Workbench creates the sample project in the default workspace folder and 
opens the Application Development perspective. 


5. Inthe Project Navigator view, expand the c_demo_sa project. 
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Symbol Br... 


c_demo_sa (Wind River Standalone (No Operating ‘ 
(ii cdemo. elf (MCF-0x00000000-BE-diab_DEBUG) 
ad 4RM-0x00000000-BE-diab_DEBUG 
BS ag 4RM-0x00000000-LE-diab_DEBUG 
e& 4RM-0x04000000-BE-diab_DEBUG 
ad 4RM-0x04000000-LE-diab_DEBUG 
e& ARM-0x08000000-BE-diab_DEBUG 
e& 4RM-0x08000000-LE-diab_DEBUG 
ee MCF-0x00000000-BE-diab_DEBUG 
@? mcF-0x20000000-BE-diab_DEBUIG 
ee MCF-0x40000000-BE-diab_DEBUG 
ee MIPS32-4KEc-BE-16bit-diab_DEBUG 
ee MIPS32-4KEc-BE-32bit-diab_DEBUG 
(29 mips32-4KEc-LE-16bit-diab_DEBUG 
ae MIPS32-4KEc-LE-32bit-diab_DEBUG 
e& MIPS32-4Kx-BE-32bit-diab_DEBUG 
ad MIPS32-4Kx-LE-32bit-diab_DEBUG 
e& MIPS32-BCM-BE-32bit-diab_DEBUG 
ee MIPS32-BCM-LE-32bit-diab_DEBUG 
a MIPS32-IDT-BE-32bit-diab_DEBUG 
(29 mips32-IDT-LE-32bit-diab_DEBUIG 
ee MIPS32-PHI-BE-32bit-diab_DEBUG 
ee MIPS32-PHI-LE-32bit-diab_DEBUG 


HH HHH HHH HHP HHH HHH BB 


To build the sample project for use with the Wind River Instruction Set 
Simulator (WISS), right-click on the c_demo_sa top-level folder and select 
Build Options > Set Active Build Spec. 


The Set Active Build Spec and Debug Mode dialog appears. 
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“) Set Active Build Spec and Debug Mode {x} 


PPC603diab 

PPC6O3di S 
MIP532-4KEc-BE-16bit-diab 
MIPS32-4KEc-LE-16bit-diab 
MIPS32-4KEc-BE-32bit-diab 
MIPS32-4KEc-LE-32bit-diab 
MIPS32-4Kx-BE-32bit-diab 
MIPS32-4Kx-LE-32bit-diab 
MIP532-BCM-BE-32bit-diab 
MIPS32-BCM-LE-32bit-diab 
MIPS32-IDT-BE-32bit-diab 
MIPS32-IDT-LE-32bit-diab 
MIPS32-PHI-BE-32bit-diab 
MIPS32-PHI-LE-32bit-diab 
MIPS32-PNX-BE-16bit-diab 


Debug mode (use debug mode Flags) 


@ 


7. Scroll to the top and highlight PPC603diab-WISS. 


8. Select Debug mode (use debug mode flags) so Workbench will generate 
symbolic debug information. 


9. Click OK. 
10. Right-click on the project name and select Rebuild Project. 


Workbench builds the sample project. The results of the project build appear 
in the Build Console view. 


Error Log Tasks Problems Properties (EIN: /ifemyrm ie, 4 Terminal Console 


Sel|\S$ts\s4@Harv 

ecno” Danang Fr CousuIeD" Wiss _DLCUUay uate. UF UCe “Yy “AUeDUY "Uae “CrP COUIL SS Winiuiss “UO TOOL Aric lien “OU TOCL=uiEe 

S_DEBUG/date.o" -c "date.c" be] 

building PPC603diab-WISS_DEBUG/date.o 

echo "building PPC603diab-WISS_DEBUG/math.o";dcc -g -Xdebug-dwarf2 -t~PPC603ES:windiss -DTOOL_FAMILY=diab -DTOOL=diat 

5_DEBUG/math.o" -c "math.c" 

building PPC603diab-WISS_DEBUG/math.o 

echo "building PPC603diab-WISS_DEBUG/addone.o";das -tPPC603ES:windiss -DTOOL_FAMILY=diab -DTOOL=diab -DPowerPC -DP 

building PPC603diab-WISS_DEBUG/addone.o 

echo "building PPC603diab-WISS_DEBUG/cdemo.elf"; did -o "PPC603diab-WI55_DEBUG/cdemo. elf" -t~PPC603ES:windiss cdemo-PO' 

S_DEBUG/cdemo.o PPC603diab-WI5S_DEBUG/strutils.o PPC603diab-WI55_DEBUG/engineer.o PPC603diab-WI5S_DEBUG/calendar — 

ath.o PPC603diab-WISS_DEBUG/addone.o = iF [[ "0" = "1" ]; then echo “building Run plink utility"; plink PPC603diab-WI55_DEBUG) 

building PPC603diab-WISS_DEBUG/cdemo.elf a 

make: built targets of C:/'WindRiver/workspace/c_demo_sa 


< il 
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15.3.1 Downloading the Sample Code 


To run the sample code, use the following steps: 


1. Inthe Target Manager, highlight the target connection name 
WRISS_MPC8260. 


2. Inthe Project Navigator view, right-click on cdemo.elf and select Reset and 
Download. 


The Reset and Download view appears. 


% WRISS_MPC8260 - MPCB260 


Modify attributes and launch. 


Name: | wWRISS_MPC8260 - MPC8260 


[ Main egy Reset @® Download @ Instruction Pointer | # Run Options ** Projects to Build [=] Common 


Connection 


Connection to use: | WRISS_MPC8260 (localhost) y | DHide unconnected 


Connect WRISS_MPC8260 - WRISS_MPC8260 is connected. 


Core: |MPC8260 


3. Leave all settings at their defaults and click Debug. 
The OCD Console view opens. 
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Error Log Tasks Problems Properties |Build Console Terminal | Console OCD Console X 


Testing JTAG Communication Passed 
Attempting to restore CPU context. Passed 
C:\WindRiver\workspace\c_demo_sa\PPC603diab-WISS_DEBUG\cdemo. elf COCCECCLTLL Teer | 


Loading symbols... Completed at Default Offset (<1 sec) 
Specified not to Run 
* Reset and Download Completed * 


The OCD Console view shows the progress of the download operation, as 
Workbench downloads the sample code to the Wind River Instruction Set 
Simulator. 


Proceed to 15.4 Profiling Your Code, p.272. 


15.4 Profiling Your Code 


To perform statistical profiling analysis on your code, use the following steps: 


1. Inthe Workbench toolbar, select 
Window > Show View > OCD Statistical Code Profiling. 


The OCD Statistical Code Profiling view opens. 
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Error Lag Tasks Problems | Properties Build Console Terminal Console (]j|/felenticisce-h@=s la ysjl step.’ 


Sm i & 


Profile Data | Profile Plot 


Function Name Module Name (File B... ~ Start Address End Address CPU Percentage 
main C:/WindRiverfworks,.. 000014030 0x00014338 0.00 
strcpy C:/WindRiver/works... 0x00014338 0x0001439c 0,00 
strcmp C./WindRiver/works,.. 0x0001439c 0x00014404 0,00 
engineers C:/WindRiver/works... 0x00014404 0x00014584 0,00 
dayOfYear C:/WindRiver/works... 0x00014584¢ Ox00014674 0.00 
dateForDayNum C:/WindRiver/works... 0x00014674 0x00014740 0,00 
daysBetween C:/WindRiver/works,.. 0x00014740 0x000147b0 0,00 
calendar C:/WindRiver/works... 0x000147b0 0x00014938 0.00 
addCell C:/WindRiver/works... 0x00014938 0x00014984 0.00 
swapCells C:/WindRiverfworks,.. 0x00014984 0x00014a00 0,00 
linkList C./WindRiverfworks,.. 0x00014a00 0x00014bd8 0,00 
send_month C:/WindRiver/works,.. O0x00014bd8 0x00014c50 0,00 
date Ci/WindRiver/works... 0x00014c50 Ox00014dic 0.00 
Factorial C:/WindRiver/works,.. Ox00014dic 0x00014d64 0,00 
FactorialDemo Cl WindRiver/works...  0x00014d64 0x00014e10 0,00 


The view populates with the functions from your code. (Note that the view 
only populates when there is code on the target. If you opened the view 
without downloading code as described above, the view would be empty.) 


The functions are arranged in five columns, listing the function name, the full 
path to the function, the start and end addresses of the function, and the 
percentage of CPU time each function used. Since you have not yet run the 
code, the CPU Percentage column just reads 0.00. 


To sort the functions, click on a column heading. In the above image, the arrow 
in the heading of the Start Address column shows that the functions are sorted 
by lowest starting address. 


NOTE: By default, the Module Name field shows the path to where the 
function was built. If you have a function that is not physically located where 
it was built, then in the OCD Statistical Code Profiling view you can click 
Toggle local build/source paths in table to make the Module Name field 
show the full path to the file’s physical location. 


2. Inthe OCD Statistical Code Profiling view, click Configure PFA Code Range. 
The Profile Code Range dialog appears. 
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Profile Code Range 


Retrieving profile range... 
New profile range: 0x00014000,.0x00014F70 


Start Address: Ox00014000 


End Address: | oxo0014F70 


Current Rate: | fff } 
| ¥| 


Start Profile OK 


3. Use the Start Address and End Address fields to set the desired code range. 


To obtain the start address, click the heading of the Start Address column. (The 
arrow in the heading of the Start Address column should be pointing down, 
to show that the first address is at the top of the column. If it is pointing up, 
click the Start Address column heading again.) For the C demonstration 
program, the first address is the start of the function main at 0x00014030. 


NOTE: You can set the Profile Code Range dialog to populate with the 
beginning of your downloaded code automatically, by clicking the Show PFA 
preference page button and selecting the Set profile range to beginning of 
downloaded code checkbox in the dialog that appears. 


To obtain the end address, click the heading of the End Address column. (The 
arrow in the heading of the Start Address column should be pointing up, to 
show that the last address is at the top of the column. If it is pointing down, 
click the End Address column heading again.) For the C demonstration 
program, the last address is the end of the function abs at 0x00014f64. 


4. Inthe Start Address field, enter 0x00014030. 
5. Inthe End Address field, enter 0x00014f64. 
6. Click Modify. 

7. Click OK. 


274 


15 OCD Statistical Code Profiling 
15.4 Profiling Your Code 


8. Inthe OCD Statistical Code Profiling view, click Start PFA Profiling. 


This starts your code running in PFA mode. A >PFA> prompt appears in the 
OCD Command Shell. 


9. Inthe OCD Statistical Code Profiling view, click Stop PFA Profiling. 


This returns the target to Background Mode. The OCD Statistical Code 
Profiling view is now populated with a list of the functions called while the 
code was running, showing the percentage of run time for each function. 


Error Log Tasks | Problems Properties Build Console Terminal | Console yj|\leleelssmte- mee Sarr ines 


Profile Data | Profile Plot 


Function Name Module Name (File B... Y= Start Address End Address CPU Percentage 
Tain C:/WindRiver/works,.. 000014030 0x00014338 7.43 
strcpy C:/WindRiverfworks,.. 0x00014338 0x0001439c 11.89 
strcmp C:/WindRiver/works,.. 0x0001439c Ox00014404 31.85 
engineers C:/WindRiverfworks... 0x0001440¢4 0x00014584¢ 5.10 
dayOfYear C:/WindRiver/works,.. 000014584 Ox00014674 25.69 
dateForDayNum C:/WindRiverfworks... 0x00014674 0x00014740 3.40 
daysBetween C:/WindRiver/works,.. 0x00014740 0x000147b0 1.49 
calendar C:/WindRiver/works,.. 0x000147b0 0x00014938 2.76 
addcell C:/WindRiverfworks.,. 0x00014938 0x00014984 0.64 
swapcCells C:/WindRiver/works,.. 000014984 Ox00014a00 0.42 
linkList C:/WindRiver/works,.. 0x00014a00 0x00014bd8 4.46 
send_month C:/WindRiver/works,.. 0x00014¢bd8 0x00014c50 0.85 
date C:/WindRiverfworks... 0x00014c50 Ox00014dic 2.76 
Factorial C:/WindRiver/works,.. Ox00014dic Ox00014d64 0.21 
_factorialbemo C:/WindRiver/works... Ox00014d64 Ox00014e10 0.00 


To see graphic representations of the code profile, click the Profile Plot tab. 


The OCD Statistical Code Profiling view can display information in any of four 
graph types. To cycle between these graph types, use the Show next graph type 
and Show previous graph type buttons. 


To change the color assigned to each function, use the Change graph colors button. 
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Figure 15-1 Two-dimensional Bar Graph 


Error Log Tasks Problems Properties | Build Console OCD Command... OCD Console Terminal Console |Lyj|\felemere ree 
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Figure 15-3 Two-dimensional Pie Graph 


‘Error Log Tasks Problems Properties Build Console OCD Command... OCD Console Terminal Console yj] \felenete-" === ln x Wis) 


Profile Data | Profile Plot 


Function 
stremp 
dayortear 
strepy 

rain 
LinkList 
engineers 
calendar 
dateForDayNur 
date 
daysDetween 
swapCells 
send_month 
aadcel1 
factorial 


Figure 15-4 Three-dimensional Pie Graph 


Error Log Tasks Problems Properties Build Console OCD Command... 


Profile Plot 


Color cpus Function 
— 35.36 strcmp 
mo 24.77 dayOtYear 
— 13.29 strepy 
— 5.63 rain 
— 5.10 LinkList 

2 —a 5.10 engineers 
— 3.15 calendar 
= 2.70 dateForDayNur 
=o 2.03 date 
— 0.60 day sDetween 

0.60 swapCells 

‘mee 0.45 send_month 
tooo 0.23 addcell 
— 0.23 factorial 


By default, these graphs show only functions that used CPU time while your code 
was running. You can also set the bar graphs (though not the pie graphs) to show 
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all functions, whether they were called or not, by clicking the Show PFA 
preference page button, setting the Set number of functions to display field to 25 
(the maximum), selecting the Display functions with 0% time in bar graphs 
checkbox, and clicking Apply. 


Figure 15-5 OCD Statistical Code Profiling Preferences Dialog 


% Preferences 


Help * OCD Statistical Code Profiling Preferences 
+ Install/Update 


+) Java 
OCD Command Shell Set number of functions to display (Maximum = 25) 

=| Run/Debug | 25 
Breakpoints 
Cache Options 
Console Display Functions with 0% time in bar graphs 
Disassembly 
Expression Views 
External Tools 
Forking 

4) Launching 

Memory View = 
OCD Statistical Code P 
Performance 
Perspectives 
Source Lookup 
String Substitution 
View Management 

{#- ScopeTools 

{) Static Analysis 

System Viewer 
(Target Manager 


4 Team Restore Defaults Apply 


Set profile range to beginning of downloaded code 


15.4.1 Profiling Selected Functions 


You can also set the OCD Statistical Code Profiling view to profile only selected 
functions. For example, say you are only interested in the function calendar. In the 
Start Address and End Address columns you can see that the function calendar 
starts at 0x00014740 and ends at 0x00014938. Enter those values in the Start 
Address and End Address fields in the Profile Code Range dialog, and click 
Modify and then OK. Now when you click Start PFA Profiling, the OCD 
Statistical Code Profiling view returns data only for the function calendar. 
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15.4.2 Browsing Functions in Source 
To see the source for any function, highlight the function in the Profile Data tab 
and click Browse PFA function in source. The selected function is displayed in the 
Workbench editor. 

15.4.3 Updating the Profile Data 
To update profile data, use the Refresh/Update PFA grid data button. You can see 
the output for each function in the OCD Command Shell. 

15.4.4 Removing Functions 


To delete a function from the Profile Data tab, highlight the function and click 
Remove selected function. 
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16 


Using the Cache View 


16.1 Introduction 281 

16.2 Connecting to the Target 282 

16.3 Creating a Project 293 

16.4 Examining Cache 299 

16.5 Viewing Cache Source 303 

16.6 Comparing Memory 303 

16.7 Reconfiguring the Cache 305 

16.8 Exporting Cache Information 305 

16.9 Using Processors Without Cache Lines 306 


16.1 Introduction 


Use the Cache view to view instructions and data stored in cache. 


The Cache view has two tabs: Cache Lines and Advanced Control and Status. 
Cache Lines is the default tab, for processors (the majority) that organize their 
cache memory in logical blocks, each of which contains an address index, an 
address tag, and a given number of bytes of data; each such block of memory is 
called a cache line. 
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For targets that do not use cache lines, such as Freescale ColdFire, the Cache view 
cannot display cache information. However, the Advanced Control and Status tab 
provides cache control options for these targets. 


In either case, the Cache view displays tabs for the Instruction Cache and the Data 
Cache. (If your target processor uses a multi-level cache, there may be additional 
tabs visible, such as L2 Data Cache, L2 Instr Cache, and so on.) Before you perform 
any operation in the Cache view, make sure you are in the appropriate tab. 


To populate the Cache view, you must have an active target connection. 


16.2 Connecting to the Target 
First, open Workbench according to the method for your host computer. 


Linux/Solaris Hosts 
From your installation directory, issue the command 


S ./startWorkbench.sh 


Windows Hosts 
Select Start > All Programs > Wind River > Wind River Workbench version. 


On Windows hosts, Workbench prompts you to specify a workspace location. 
Linux hosts use the default location installDir!workspace. 


When Workbench opens, the Quick Target Launch dialog appears. 
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Wind River On Chip Debugging 
@ Choose How You Want to Start 


Defined Launches 
Create a new launch configuration 


Edit an existing launch configuration 


Connect, Attach, Reset and Download 


Sync with target and download symbols 


Do not show this dialog on startup 


1. Select Create a new launch configuration. 
The Connection Type dialog appears. 


This tutorial uses a Wind River Probe emulator connected to a Wind River 
PPMC750EX target. 
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% New Connection 


Connection Type 


Please select connection type, 


Wind River OCD ICE Connection 

Wind River OCD I5S Connection } 
Wind River ¥xWorks 6.x Core Dump Connection } 
Wind River ¥xWorks 6.x Simulator Connection 

Wind River ¥xWorks 6.x Target Server Connection 


Cancel 


2. Select Wind River OCD Probe Connection and click Next. 


The Processor Selection dialog appears. 
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® New Connection 


Wind River Probe Settings 


Configure the designator settings for the emulator, 


Designators 


©) Processor: | PPC7SOFX 
O Board file: 


¥  Designator Processor Processor Plugin 
M] PPC7SOFX PPC?SOFX PowerPC 7xx Family Process... 


Auto-attach to connected designators 


Communications 


USB Device Name: | PRO40310 


3. Click Select. From the list that appears, expand MPC7xx and select PPC750FX. 
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% Processor Selection 


Current Connection - Wind River Probe : PPC750F 


+) MPC6xx 

| MPC? 4xx 

=) MPC?xx 
MPC740 
MPC?745 
MPC750 
MPC?7S5S 
PPC?40 
PPC?745 
PPC?50 
PPC?50CX 
PPC?S50CXE 
PPC?SOCXR 
PPC?S0GX% | 
ppc7sni | 


4. Make sure the Auto-attach to connected designators checkbox is selected and 
click OK. 


You are returned to the Processor Selection dialog. 
5. Click Next. 


6. The connection wizard passes through a number of screens that you do not 
need to configure for this tutorial. Leave all settings at their defaults and click 
Next until you come to the Connection Summary. 
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£ . 
‘W) New Connection 


Connection Summary 


Please review the connection information 


Connection name: WRPrabe_PPC7SOFX_0 : 


Summary 


Property Value 
ADDR PRO40310 
AutoAttachConnectedCon true 
DESIGNATORMAP 
DEVICE Wind River Probe 
NAME_MAPPING [*;*.unstripped],[*;*] 
PATH_MAPPING (Jd 
STYLE USBDEVICE 


Immediately connect to target if possible 


Ce) 


7. Make sure that the Immediately connect to target if possible checkbox is 
selected and click Finish. 


Workbench creates a target connection called WRProbe_PPC750FX in the 
Target Manager view. 


The Reset and Download view appears. 
8. Choose how you want to proceed: 


a. If you want to create a project in which to run and debug your code, skip 
the rest of this section and proceed to 16.3 Creating a Project, p.293. 


b. If you want to run and debug your code without creating a project, 
continue with this section. 


9. Inthe Reset and Download view, select the Reset tab. 
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Name: 


: | WRProbe_PPC75SOFX - PPC750FX 


@ Main @ Download = Instruction Pointer @#* Run Options ** Projects to Build Ey Source [] Common 

PPC7SOFX 
[(V] Play register file | C:\WindRiver\workbench-2.6\dFw\0160g\host\registers|PowerPC\7xx\WindRiver_PPMC\ppmc750Fx.reg v | 
¥ | Reset IN - Reset/setup regs ¥| Query Target 


© Specified core 
Odall cores 
Cores tied on reset: 


10. 


11. 


12. 


If you want to configure the target register values with a register file, select 
Play Register File and browse for the file you want to use. 


Register files for many Wind River-supported targets are located in 
installDir'workbench-2.x/dfw/build/host/registers. 


If you do not want to reconfigure your target registers, leave this box 
unchecked. 


Choose the type of reset initialization you want to perform. 


You can use the IN or INN initialization commands. For a full discussion of 
these two commands, see the Wind River Workbench for On-Chip Debugging 
Command Reference. 


You can also choose not to perform an initialization by clearing the Reset box. 


CAUTION: If you are manually changing registers on your target, be aware that 
issuing an IN or INN initialization command will overwrite your changes. 


Select the Download tab. 


Name: | WRProbe_PPC750FX - PPC7SOFX 


Main @ Reset [Download Way Instruction Pointer #* Run Options ** Projects to Build & Source [| Common 
ee 
PPC?SOFX 
File Download Verify Load Symbols Offset 
cdemo.elf - C:/WindRiver/standalone-1.0/samples/c_dema_.. } None ¥ 
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16 Using the Cache View 
16.2 Connecting to the Target 


Click Add Files. 


In the browser window that appears, navigate to the executable file you want 
to run. 


The file you select appears in the Filename field. Repeat this process as many 
times as necessary. 


The file at the top of the list will download to the target first, followed by the 
others from the top down. You can edit the order of the list by clicking on any 
filename to highlight it and using the Up, Down, and Delete buttons. 


Use the other fields to configure the download. 


Download 


The Download field is checked by default. If you clear it, the file will remain 
on the list but will not download data to the target. This is useful if, for 
example, you only want to download symbol information and not data. 


Verify 


The Verify field configures the extent to which the file you are downloading 
will be compared to a file that may already be on the target. There are three 
options: Full, Compare, and None. 


When this field is set to Full, a write/read verify will occur for every 
download. Workbench writes to the target and then verifies that the write to 
the target and the read from the target are identical. This is slower than a 
normal download, but it is a useful security option. 


When the field is set to Compare, Workbench will verify that the image has 
been downloaded correctly (that is, that the image on the host is the same as 
the image on the target.) This is useful for programming flash. 


NOTE: You should only set the Verify field to Compare if an image already 
exists on the target. If you set the field to Compare when there is no image on 
the target, Workbench will look for a file to compare and not find one, and the 
reset and download operation will fail. 


When the field is set to None, Workbench will perform no verification. 


The Verify field is set to None by default. 
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Load Symbol 


The Load Symbol field, which is checked by default, determines whether the 
file’s symbol information is downloaded to the target. 


Offset 


In the Offset field, you can enter a value in hex to set a memory offset bias for 


your application file. If you do not enter a value, Workbench uses the default 
value 0x00000000. 


15. Select the Instruction Pointer tab. 


Name: | WRProbe_PPC7SOFX - PPC750FX 


@ Main @ Reset # Download leeietesise isa @* Run Options | ** Projects to Build ky Source [] Common 
PPC?SOFX 


| Set instruction pointer after download 


@Use start address from download file 
Ose start address from symbol 


Ose specified start address | 


16. Set the starting point for your file. 


By default, the instruction pointer is set to use the starting address from the 
download file. 


You can set the instruction pointer to start the file from the first occurrence of 
a particular symbol (for example, main) or you can just specify a starting 
address by entering the address value in hex in the Use Specified Start 
Address field. 


If you do not want to set a starting point, clear the Set Instruction Pointer 
After Download box. 


17. Select the Run Options tab. 
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Name: WRProbe_PPC7SOFX ~ PPC?SOFX 


@ Main @ Reset # Download @ Instruction Pointer [Run Options ad Projects to Build Ey Source | [) Common 
PPC7SOFX 


@®Do not run 
OvRun to symbol iain} 
ORun to address 


1 | 


O)Run to end of program 
(Break at Exit 


(]Play post download script 


18. Determine how you want your file to run. 


19. 


By default, the Reset and Download view is set not to run the file after 
downloading. If you want the file to run, you have several options to 
determine where it should break: 


You can set it to break at the first occurrence of a symbol (for example, 
main) by selecting Run to Symbol and entering the symbol in that field. 


You can set it to break at the end of your program by selecting Run to end 
of program. 


You can set it to break at a given memory address by selecting the Run to 
Address box and entering the address in hex in that field. 


You can set it to break at an _exit routine by selecting the Break at Exit box. 


If you need to perform a post-initialization, you can define it here. Select the 
Play post download script box and click Browse. In the browser window that 
appears, navigate to your initialization file. 


Select the Source tab. 


Name: WRProbe_PPC7SOFX - PPC7SOFX 


@ Main @ Reset @ Download @ Instruction Pointer @# Run Options ** Projects to Build T 7 Source Wes Common 
Source Lookup Path: 


20. 


ESB ag Default 


Remove 


Use the Source tab to configure the source path of your file. 
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21. 


Workbench uses the input path of the local file system by default. Unless you 
need to use a different path, you do not need to do anything in the Source tab. 


If you need to use a different path, click Add... and use the Add Source dialog 
to configure the appropriate search path for your project. 


Select the Common tab. 


@ Main @ Reset @ Download | ® Instruction Pointer | @# Run Options ** Projects to Build {7 Source [= Common 
Save as 
® Local file 


O Shared file: | 


Standard Input and Output 


22. 


23. 
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[¥] Allocate Console (necessary For input) 


OFile: 


Specify whether your launch configuration is local or shared. 


The configuration is local by default. To make it shared, click Shared file: and 
browse to the shared directory where you want the configuration to be located. 


You have now fully defined your reset and download operation. 
Click Debug. 


Workbench initializes the target board, then downloads the file, then runs the 
file. 


The OCD Console view opens to show the progress of the reset and download 
operation. 


16 Using the Cache View 
16.3 Creating a Project 


Tasks | Problems Properties Build Console Error Log Terminal Trace OCD Command Shell OCD Console X 


"Reset and Download 


Testing Communications to Hardware Interface.... Passed 

Driving HRESET to be High Passed 

Driving HRESET to be Low rr Passed 

Waiting HRESET Low Acknowledge. Passed 

Attempting JTAG communication... cei Passed 

Waiting for HReset to be released, its Passed 

Testing for target STOP State 7 Passed 

Comparing target CPU with CF setting.. i Passed 

Waiting for HRESET High Acknowledge. eeu Passed 

Testing JTAG Communication. one Passed 

Loading Internal Registers... Passed 

Testing JTAG Communication, ona Passed 

Getting value of cf mmu option .... : Passed 

Attempting to restore CPU context Passed 
C:\WindRiver\workspace\c_demo_sa\PPC603diab_DEBUG\cdemo. elf COCO) 
| Loading symbols... Completed at Default Offset (<1 sec) 
| Specified not to Run 

| * Reset and Download Completed * 


Proceed to 16.4 Examining Cache, p.299. 


16.3 Creating a Project 


NOTE: If you do not plan to build or edit your source files within Workbench, skip 
this section and proceed to 16.4 Examining Cache, p.299. 


Click Close in the Reset and Download view. 


This tutorial uses the C Demonstration Program, which is included in your 
Workbench installation. 


1. Inthe Workbench toolbar, select File > New > Project. 


The New Project wizard appears. 
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Enable/disable toggle button 


) New Project 


Select a wizard 


Creates a new O5-agnostic sample project 


Wizards: 


| type filter text 


(H-(> VxWorks 5.5 

HS VxWorks 6.x 

> ¥xWorks 653 

(& Wind River Linux 

=) & Examples 
(% Native Sample Project 
w 
(a? ¥xWorks 5.5 Downloadable Application Sample Project 
iH} ¥xWorks Downloadable Kernel Module Sample Project 
(BP? ¥xWorks Real Time Process Sample Project 
(2 Wind River Linux Application Sample Project 
8 Wind River Linux User-Defined Sample Project 


(] Show All Wizards, 


Finish Cancel 


2. Expand the Examples folder and select Standalone Sample Project. 
3. Click Next. 


A sample project template appears. 
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%) New Project Sample 


Sample Project Template 


Select a sample project template. 


Available Examples: Information: 


C Demonstration Program C Demonstration Program 


(C++ Demonstration Program This program demonstrates various C 
| The Ball Demonstration Program language features including structures, 


=. : character arrays, linked lists, and 
1S The Panel Demonstration Program recuraor: 


You can build and download this program 
to your simulator or target board, The 
default RAM location for the program is 
0x00014000, To change the default 
memory address, edit the simple. |k linker 
command file, 


Features 


The Following Features are demonstrated 
From main(}: 


® Factorials: The FactorialbDemot)} 
__function generates 4 factorial table _ 


4. Select C Demonstration Program and click Finish. 


Workbench creates the sample project in the default workspace folder and 
opens the Application Development perspective. 


5. Inthe Project Navigator view, expand the c_demo_sa project. 


295 


Wind River Workbench for On-Chip Debugging 
User Tutorials, 2.6.1 


 ProjectNa... x Symbol Br... | ~ | 


User Build Arguments: v 


eis c_demo_sa (‘Wind River Standalone (No Operating Sf 

By cdemo. elf (MCF-0x00000000-BE-diab_DEBUG) 

@® aRMm-Ox00000000-BE-diab_DEBUG 

ag 4RM-0x00000000-LE-diab_DEBUG 

ae 4RM-0x04000000-BE-diab_DEBUG 

@? aRM-Ox04000000-LE-diab_DEBLIG 

e& 4RM-0x08000000-BE-diab_DEBUG 

oe 4RM-0x08000000-LE-diab_DEBUG 

ee MCF-0x00000000-BE-diab_DEBUG 

@? mcF-0x20000000-BE-diab_DEBUIG 

ee MCF-0x40000000-BE-diab_DEBUG 

e& MIPS32-4KEc-BE-16bit-diab_DEBUG 

e& MIPS32-4KEc-BE-32bit-diab_DEBUG 

cH 28 mIPS32-4KEc-LE-16bit-diab_DEBUG 

it ag MIPS32-4KEc-LE-32bit-diab_DEBUG 

a MIPS32-4Kx-BE-32bit-diab_DEBUG 

@ mips32-4kx-LE-32bit-diab_DEBUG 
MIPS32-BCM-BE-32bit-diab_DEBUG 
MIPS32-BCM-LE-32bit-diab_DEBUG 


e 
e 
 mips32-IDT-BE-32bit-diab_DEBLIG 
ea 
e 
e 


>) 
i) 
a 
>) 
& 
@ 
@ 
& 
i) 
& 
>] 
i) 
ce) 


ca 


+ 


+ MIPS32-IDT-LE-32bit-diab_DEBUG 
MIPS32-PHI-BE-32bit-diab_DEBUG 


MIPS32-PHI-LE-32bit-diab_DEBUG 


BEA www 


+ 


6. To build the sample project for use with a PowerPC target, right-click on the 
c_demo_sa top-level folder and select Build Options > Set Active Build Spec. 


The Set Active Build Spec and Debug Mode dialog appears. 
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W) Set Active Build Spec and Debug Mode (x) 


PPC jab 
PPC603diab-WISS 
MIPS32-4KEc-BE-16bit-diab 
MIPS32-4KEc-LE-16bit-diab 
MIPS32-4KEc-BE-32bit-diab 
MIPS32-4KEc-LE-32bit-diab 
MIPS32-4Kx-BE-32bit-diab 
MIPS32-4Kx-LE-32bit-diab 
MIPS32-BCM-BE-32bit-diab 
MIPS32-BCM-LE-32bit-diab 
MIPS32-IDT-BE-32bit-diab 
MIPS32-IDT-LE-32bit-diab 
MIPS32-PHI-BE-32bit-diab 
MIPS32-PHI-LE-32bit-diab 
MIPS32-PNX-BE-16bit-diab 


Debug mode (use debug mode flags) 


7. Scroll to the top and highlight PPC603diab. 


8. Select Debug mode (use debug mode flags) so Workbench will generate 
symbolic debug information. 


9. Click OK. 
10. Right-click on the project name and select Rebuild Project. 


Workbench builds the sample project. The results of the project build appear 
in the Build Console view. 


Error Log Tasks Problems Properties BQN: > iam ms |= Terminal Console 


/ J} eet 
& | @ i Gl 

con” ooNoIniyg FrCoosUIaD Wiss _OCUUSUate.. OF FUCe YY “AUSDUg*Owa;nre “tr Pr Cool. WiIniss “UO TOUC LT Aric T= “Oo TOU =ulee 
S_DEBUG/date.o" -c "date.c" a 
building PPC603diab-WISS_DEBUG/‘date.o 
echo “building PPC603diab-WISS_DEBUG/math.o";dec -g -Xdebug-dwarf2 -t~PPC603ES:windiss -DTOOL_FAMILY=diab -DTOOL=diat 
5_DEBUG/math.o" -c "math.c" 
building PPC603diab-WISS_DEBUG;‘math.o 
echo “building PPC603diab-WISS_DEBUG/addone.o";das -tPPC603ES:windiss -DTOOL_FAMILY=diab -DTOOL=diab -DPowerPC -DP 
building PPC603diab-WISS_DEBUG/addone.o 
echo "building PPC603diab-WISS_DEBUG/cdemo.elf"; did -o "PPC603diab-WI55_DEBUG/cdemo, elf" -t~PPC603ES:windiss cdemo-PO' 
S_DEBUG/cdemo.o PPC603diab-WI55_DEBUG/strutils.o PPC603diab-WI5S_DEBUG/engineer.o PPC603diab-WI55_DEBUG/calendar — 
ath.o PPC603diab-WISS_DEBUG/addone.o = iF [ "0" = "1" ]; then echo "building Run plink utility";plink PPC603diab-WI55_DEBUG) 
building PPC603diab-WISS_DEBUG/cdemo.elf = 
make: built targets of C:/WindRiver{workspace/c_demo_sa 


< ll 
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16.3.1 Downloading the Sample Code 


To run the sample code, use the following steps: 


1. Inthe Target Manager, highlight the target connection name 
WRProbe_PPC750FX. 


2. Inthe Project Navigator view, right-click on cdemo.elf and select Reset and 
Download. 


The Reset and Download view appears. 


% WRProbe_PPC750FX - PPC750FX 


Modify attributes and launch. 


Name: | WRProbe_PPC7SOFX - PPC7SOFX 


@ Reset @ Download | # Instruction Pointer #* Run Options ** Projects to Build {Source [=] Common 
v 


Connection 


[Create 4 New Target Connection ] 


Connection to use: =WRProbe_PPC?750FX (localhost) | (Hide unconnected 


Connect WRProbe_PPC7SORX - WRProbe_PPC7SOFX is connected, 


Core: | PPC7S0F% v) 


3. Leave all settings at their defaults and click Debug. 
The OCD Console view opens. 
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Error Log Tasks Problems Properties Build Console Terminal Console OCD Console X 


Testing JTAG Communication Passed 
Attempting to restore CPU context. Passed 
C:\WindRiver\workspace\c_demo_sa\PPC603diab-WISS_DEBUG\cdemo. elf COCCI} 


Loading symbols... Completed at Default Offset (<1 sec) 
Specified not to Run 
* Reset and Download Completed * 


The OCD Console view shows the progress of the download operation. 


16.4 Examining Cache 


Use the instructions in this section to examine cache. 


16.4.1 Instruction Cache 


1. Inthe Workbench toolbar, select Window > Show View > Cache. 
2. Click on the Instr Cache tab. 
3. Click the Enable Instr Cache toggle button. 


299 


Wind River Workbench for On-Chip Debugging 
User Tutorials, 2.6.1 


OCD Command Shell Binary Upload CF Options OCD Statistical Code Profiling Hardware Diagnostics RE Cache * Trace 
ache - L1 Instr Cache is Enabled | =} s | #| Ua | Bo % ay 
LI Instr Cache | L1 Data Cache | L2 Unified Cache | 


Set-Uay Status Address Data Disassembly Function Source Resource In Folder Location Text 


Cache Lines | Advanced Control and Status | 


4. Inthe Debug view, click Resume. 
5. Let the code run and then click Suspend. 
6. Inthe Cache view, click Refresh. 


NOTE: The cache view has two refresh buttons: Refresh and Refresh All. 
Refresh updates the cache with only the 100 most recent instructions. Refresh 
All updates the entire cache. A Refresh All operation may take significantly 
longer. 


The Cache view populates with the instructions stored in cache while your 
code was running. 


OCD Command Shell Binary Upload CF Options OCD Statistical Code Profiling Hardware Diagnostics RE Cache X Trace 
ache - L1 Instr Cache is Enabled | 34| x | es | An | SB & % ris 


Li Instr Cache | L1 Data Cache | L2 Unified Cache _ 


Set-Way Status Address Data Disassenbly Function Source Resource # 
1-0 Vv LRU Ox00014020 Ox48000011 bl main E 

O0x00014024 Ox48000000 deadloop: b deadloop a 

Ox00014028 Ox38630001 addone: addi r3,r3,1 

Ox0001402C Ox4Es800020 blr 

O0x00014030 Ox9421FFBO main: stwu ri1,-Ox50(r1) 

0x00014034 Ox?cO80246 mflr rO0 

0x00014038 Ox93810044 stw r29,0x44(r1} 

Ox0001403C Ox93C10048 stw r30,0x468 (r1) 

Ox000140E0 Ox4s8000D85 bl fibonacciDemo 

O0x000140E4 Ox39400003 Li r10,3 

OxO000140E8 Ox9141000C stw r10,0xC (r1) 

OxO000140EC Ox39200000 li r9,0 

Ox000140FO O0x91210010 stw r9,0x10(r1) 


—————_——<—<——————— 
Cache Lines | Advanced Control and Status 
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16.4 Examining Cache 


16.4.2 Data Cache 


1. In the Workbench toolbar, select Window > Show View > Cache. 
2. Click on the Data Cache tab. 
3. Click the Enable Data Cache toggle button. 


OCD Command Shell Binary Upload CF Options | OCD Statistical Code Profiling Hardware Diagnostics : Trace 
‘ache - L1 Data Cache is Disabled 2) 8 & ln es) ee G 


a 
Li Instr Cache | L1 Data Cache | 12 Unified Cache 


Set-Way Status Address Data Disassembly Text 


ee _ 
Cache Lines | Advanced Control and Status 


4. Inthe Debug view, click Resume. 


5. Let the code run and then click Suspend. 
6. Inthe Cache view, click Refresh. 


The Cache view populates with the data stored in cache while your code was 
running. 

16.4.3 Interpreting the Cache View 
The Cache view displays information in the following columns: 


Set-Way 


A Set-Way is a logical grouping of cache lines. This column displays the 
number of the Set-Way to which the following cache lines belong. 


Status 


This column displays the status of the given cache line, whether valid (V) or 
invalid (I). By default, the Cache view shows all available information, 


301 


Wind River Workbench for On-Chip Debugging 
User Tutorials, 2.6.1 


whether valid or invalid. To see only valid instructions and data, click the 
Valid button in the Cache view. This flushes all invalid information and shows 
only valid instructions and data. 


To mark all instructions or data currently in the cache as invalid, click the 
Invalidate button in the Cache view. This does not disable the cache. 


This column also shows the algorithm the cache uses to return cached 
information to RAM. If a cache has limited storage, which it usually does, 
information will have to be periodically ejected to make room for a new entry. 
The decision on what to eject is handled by a heuristic algorithm, the 
replacement policy. A popular replacement policy is LRU, which replaces the 
Least Recently Used entry. 


Address 


This column displays the address in RAM to which this cache line corresponds. 


Data 


This column displays the bits of data the cache line contains. This column only 
populates if you select Data Mode by clicking the Data button in the Cache view. 


Disassembly 


This column displays the operation codes that the data in the Data column 
represent (if any.) This column only populates if you select Data Mode by clicking 
the Data button in the Cache view. 


Function 


This column displays the associated function for each instruction in the Cache 
view. This column is only visible in the instruction cache. It only populates if you 
select Source Mode by clicking the Source button in the Cache view. 


Source 


This column displays the source for each instruction in the Cache view. This 
column is only visible in the instruction cache. It only populates if you select 
Source Mode by clicking the Source button in the Cache view. 


Text 


This column displays ASCII strings that the data in the Data column represent (if 
any.) 
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16.5 Viewing Cache Source 


To disable the cache, select the Instr Cache tab or the Data Cache tab and click the 
Enable/Disable toggle button again. 


To clear the contents of the Cache view, click the Clear button. 


16.5 Viewing Cache Source 


Source Mode is only available in the instruction cache. 


With Source Mode enabled, the instruction cache shows the function and source of 
each instruction in the Cache view, under the headings Function and Source. 


To see the contents of a cache line in source, use the following steps: 
1. Select the Instruction Cache tab. 

2. Click the Source button to enable Source Mode. 

3. Right-click on an instruction and select Go To. 


Workbench brings up the source of the instruction in the editor. 


16.6 Comparing Memory 


The Cache view allows you to compare the information in the cache to information 
stored in RAM. 


1. Right-click in the Cache view and select Display Cache Properties. 


The Preferences dialog appears. 
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W, Preferences 


#1 Help * | Cache 
+) Install/Update 


a deve Appearance color options: 
OCD Command Shell i hi 


=) Run/Debug Unchanged cache values color Color: (| 


; Unchanged memory values color 
Breakpoints 9 ¥ 


Difference color 


Console 
Disassembly 
Expression Views 
External Tools 
Forking 
#) Launching 
Memory View 
OCD Statistical Code P 
Performance 
Perspectives 
Source Lookup 
String Substitution 
View Management 
ScopeTools 
+) Static Analysis 
System Viewer 


+) Target Manager 
2 2 Restore Defaults Apply 


Use the Preferences dialog to set the color of the data stored in cache. 
Click on Unchanged cache values color. 

Click the Color button. 

On the color palette, choose the color black. 

Click on Unchanged memory values color. 

On the color palette, choose the color blue. 

Click on Difference color. 

On the color palette, choose the color red. 


Click OK. 


Oe Oy Pe ise oe 


Open the drop-down menu in the upper right corner of the Cache view and 
select Compare Memory. 


Workbench displays any differences between cache and memory in red. 
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OCD Command Shell Binary Upload CF Options OCD Statistical Code Profiling Hardware Diagnostics Trace ES Cache x 
‘ache - L1 Data Cache is Enabled | 21) % @% @ 


——— 
Li Instr Cache | L1 Data Cache | 12 Unified Cache 


Set-UWay Status Address Data Disassembly Text na) 
120-0 c ¥ LRU Ox00015F00 Ox00015F10 .long Ox1iS5F10 

OxO0015F04 OxO00D18B5 .long OxD18B5 

OxO0015F08 OxO000000B .long OxB 

OxO0001S5FOC Ox00015270 .long Ox15270 

OxO0015F10 OxO00015F30 .long Ox15F30 

OxO00015F14 Ox000145E4 .long Ox145E4 

OxO00015F18 OxO000D18B5 .long OxD18B5 

OxO00015Fic Oxo00000001 .long ol 
120-0 OxO00015F00 Oxo00000k8 .long Oxis 

OxO0015F04 Ox00008445 .long Ox64a5 

OxO0015F08 Ox00015F58 .long Ox1SF58 

OxO0015FOC Ox00015F50 .long Ox15F50 

OxO0015F10 Ox00015F30 .long Ox1iSF30 

OxO0015F14 Ox0001476C_ .long Ox1476C Mi 


Cache Lines | Advanced Control and Status 


16.7 Reconfiguring the Cache 
If you are using a target board that has programmable variable cache, you can 
specify changes in the Cache view. 
1. Program the cache with a user-supplied file or program. 
2. Open the drop-down menu in the upper right corner of the Cache view and 


select Reconfigure for your changes to take effect. 


NOTE: If you are using a target board with fixed cache, choosing the 
Reconfigure option will have no visible results. 


16.8 Exporting Cache Information 


To export the information in the Cache view to a text file, right-click in the Cache 
view and select Export. 
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You can also export only selected parts of the information in the Cache view by 
highlighting the information you choose, right-clicking in the Cache view, and 
selecting Export Selected. 


16.9 Using Processors Without Cache Lines 


If you are connected to a processor that does not organize its cache in cache lines, 
you can manipulate cache using the Advanced Control and Status tab. The 
Advanced Control and Status tab does not display the contents of cache; it only 
allows you to perform operations on it. What operations are available varies by 
target processor. 


Instruction Cache 


1. Inthe Workbench toolbar, select Window > Show View > Cache. 
2. Select the Instr Cache tab. 
3. Select the Advanced Control and Status tab. 


OCD Command Shell Flash Programmer Binary Upload CF Options OCD Statistical Code ... Hardware Diagnostics EX cache x Trace 
% | & [| BOF - 


Li Instr Cache | L1 Data Cache 


Is Disabled 
{ Toggle Cache State [Enable, Disable] | 1. ean nese le 


Invalidate Instr Cache Write Protect Is Disabled 


CPUSHL Is Enabled 
[ Toggle Cache Mode State [Cacheable, Inhibited] J Buffered Write Is Disabled 


Li Fill - LN LN LN LG 
Toggle Cache Write Protect [Enable, Disable] ane: re 7 
Freeze Is Disabled 
[ Toggle Cache CPUSHL Invalidate Enable [Enable, Disable] Bursting Is Disabled 


User Stack Pointer Is Disabled 


[ Toggle Cache Buffered Write [Enable, Disable] ] 


Set Cache Line Fill To LineLineLineLong J 
Set Cache Line Fill To LineLineLongLong 
Set Cache Line Fill To LineLineLineLine 
Toggle Cache Freeze Enable 


[ Toggle Cache Bursting Enable ] 


[ Toggle User Stack Pointer Enable ] 


(a 
| Cache Lines Advanced Control and Status 
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16.9 Using Processors Without Cache Lines 


The Advanced Control and Status tab shows available cache operations for 
the connected processor. This example shows the available instruction cache 
operations for a ColdFire MCF5208 processor. 


Data Cache 


1. Select the Data Cache tab. 
2. Select the Advanced Control and Status tab. 


OCD Command Shell Flash Programmer | Binary Upload CF Options OCD Statistical Code... Hardware Diagnostics | Cache X 
ache - L1 Data Cache Is Disabled 


Trace 


* #| In| BM ZG ~ 


| Li Instr Cache | L1 Data Cache 


5 L1 Data Cache Is Disabled 
[ Toggle Cache State [Enable, Disable] ] 


Invalidate Data Cache 


os 
Cache Lines | advanced Control and Status 


This example shows the available data cache operations for a ColdFire 
MCPF5208 processor. 


307 


Wind River Workbench for On-Chip Debugging 
User Tutorials, 2.6.1 


308 


17 


Uploading Target Memory to a 
Binary File 


17.1 Introduction 309 
17.2 Uploading Memory 309 
17.3 Comparing Memory 311 


17.1 Introduction 


The Binary Upload view allows you to upload segments of target memory into a 
raw binary file. For example, you can use this view to back up your boot loader 
parameters to a file so they can be reflashed on other boards, or to back up a 
running boot loader prior to an upgrade. You can also use the view to compare the 
contents of a raw binary file with target memory. 


17.2 Uploading Memory 


To use the Binary Upload view, use the following steps: 


1. In the Workbench toolbar, select Window > Open Perspective > On Chip 
Debug. 
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2. Inthe Workbench toolbar, select Window > Show View > Binary Upload. 
The Binary Upload view appears. 


OCD Command Shell Flash Programmer Mesil= rials et inb 4 CF Options OCD Statistical Code ... | Hardware Diagnostics Cache Trace 


File Name | C:\bin_files\export_file. bin Browse 


Start Address Location | oxoo000000 


End Address Location oxoo000100 


Data Width \- E 


Upload | [_] Append uploaded data to file (|check to stop on first error encountered 


3. Inthe File Name field, specify the file to which you want the data to be 
uploaded. 


If the file does not already exist, Workbench creates it in the location you 
specify. 

4. Inthe Start Address Location field, enter the start address of the memory 
segment you want to upload. 


5. Inthe End Address Location field, enter the end address of the memory 
segment you want to upload. 


6. Inthe Data Width field, specify the data bus width for the upload operation. 


For example, if you select 32 bits, Workbench uploads the data to your file in 
a series of 32-bit memory reads. 


7. Click Upload. 


This uploads the specified memory segment to your binary file. To cancel the 
upload, click Cancel. 


By default, Workbench overwrites data in your binary file every time you click 
Upload. To append data to the file instead of overwriting it, select the Append 
uploaded data to file checkbox before you click Upload. 
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17.3 Comparing Memory 


17.3 Comparing Memory 


You can use the Binary Upload view to compare the contents of a raw binary file 
with memory, in order to detect memory corruption; for example, to check that a 
region of flash memory has not been modified by incorrect execution. 


1. Makesure the Start Address and End Address locations are the same locations 
you specified for the upload. 


2. Click Compare. 


Workbench compares the contents of the file with the memory at the specified 
location. Any mismatches are displayed below the progress bar in the Binary 
Upload view. 


If the contents of memory and your file are the same, Workbench shows the 
following result: 


| 


@ mismaTcHEs FOUND: 0 


Suppose the value at 0x00000100 has changed since you uploaded the file. 
Workbench shows the following result: 


© MISMATCHES FOUND: 4 


Display error log in editor 


3. If you want Workbench to stop the compare operation the first time it finds a 
mismatch, select the Check to stop on first error encountered checkbox. 


4. To see the difference between the memory and your file, click Display error 
log in editor. 
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55" WRProbe_PPC7SOFX B export_file.cmp 


0x00000100 
ox00000101 
0x00000102 
0x00000103 


If you specify a different start or end address for your compare operation, 
Workbench returns one of the following results. 


If the memory area you specify is smaller than the binary file: 


@ mismaTcHes FOUND: 0 


(@® UNDERFLOW: Your address range (61440 bytes) is smaller than your file size (65280 bytes) 


Display error log in editor 


If the memory area you specify is greater than the binary file: 


CO = 


© MISMATCHES FOUND: 240 


@® OVERFLOW: Your address range (65520 bytes) is greater than your file size (65280 bytes) 


Display error log in editor 
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Using the Instruction Set 
Simulator 


18.1 Introduction 313 
18.2 Connecting to the Simulator 314 


18.1 Introduction 


The Wind River Instruction Set Simulator (ISS) is a simulated hardware target for 
use in testing and prototyping. The simulator allows you to develop, run, and test 
applications on your host system, reducing the need for target hardware during 
development. 


NOTE: Wind River Workbench supports the Instruction Set Simulator only for 
On-Chip Debugging functionality. 


The ISS is also useful for demonstrations, as it allows you to run applications on 
your host system without needing an emulator or target processor. 


The ISS has no input/output functionality, so certain Workbench views are not 
accessible when using it. The Cache view, for example, since the simulation has no 
cache; also the Flash Programmer view, since the simulation has no flash memory. 


The Instruction Set Simulator runs a program by simulating the effects of each 
instruction on a target processor, one instruction at a time. Instead of generating an 
ordinary executable file, the ISS executes the entire instruction set. 
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The Instruction Set Simulator is not currently supported for ARM targets. 


18.2 Connecting to the Simulator 


To define a Wind River ISS connection, use the following steps: 


First, open Workbench according to the method for your host computer. 


Linux/Solaris Hosts 
From your installation directory, issue the command 


$ ./startWorkbench.sh 


Windows Hosts 
Select Start > All Programs > Wind River > Wind River Workbench version. 


On Windows hosts, Workbench prompts you to specify a workspace location. 
Linux/Solaris hosts use the default location installDir/workspace. 


When Workbench opens, the Quick Target Launch dialog appears. 


Wind River On Chip Debugging 
@ Choose How You Want to Start 


Defined Launches 


[EY Create a new launch configuration 
=) 
Edit an existing launch configuration 


Connect, Attach, Reset and Download 


Sync with target and download symbols 


Do not show this dialog on startup 
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18.2 Connecting to the Simulator 


1. Select Create a new launch configuration. 


The Connection Type dialog appears. 


New Connection 


Connection Type 


Please select connection type. 


Wind River Generic GDB Remote Serial Protocol Connection 
Wind River OCD ICE Connection 

Wind River OCD Probe Connection 

Wind River VxWorks 6.x Core Dump Connection 
Wind River ¥x\Works 6.x Simulator Connection 
Wind River VxWorks 6.x Target Server Connection 


Cancel 


2. Select Wind River OCD ISS Connection and click Next. 


The Processor Selection dialog appears. 
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® New Connection 


Wind River ISS Settings 


Configure the designator settings for the emulator. 


Designators 


@ Processor: [ MPC8260 


O Board file: 


¥  Designator Processor Processor Plugin 
|) mPc8260 MPC8260 PowerPC 82xx/83xx Family Proces 


< 


4uto-attach to connected designators 


3. Click Select. From the list that appears, expand MPC82xx and select 
MPC8260. 
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18.2 Connecting to the Simulator 


WW, Processor Selection 


Current Connection - Wind River ISS : MPC8260 


(=) MPC82xx 
MPC8220 
MPC8240 
MPC8241 
MPC8245 
MPC8247 
MPC8248 
MPC8250 
MPC8255 
MPC8264 
MPC8265 
MPC8266 
MPC8270 
MPC8271 
MPC8272 
MPC8275 


v 


4. Make sure the Auto-attach to connected designators checkbox is selected and 
click OK. 


You are returned to the Processor Selection dialog. 
5. Click Next. 


6. The connection wizard passes through a number of screens that you do not 
need to configure, since you are not connecting to a real target. Leave all 
settings at their defaults and click Next until you come to the Connection 
Summaty. 
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“W) New Connection 


Connection Summary 


Please review the connection information 


Connection name: | WRISS_MPC8260 | Shared: (1) 


Summary 


Property Value 
AutoAttachConnectedCon true 

+ DESIGNATORMAP 
DEVICE Wind River ISS 
NAME_MAPPING [*;*.unstripped],[*;*] 
PATH_MAPPING (Jd 


Immediately connect to target if possible 


@ 


7. Make sure that the Immediately connect to target if possible checkbox is 
selected and click Finish. 


Workbench creates a target connection called WRISS_MPC8260 in the Target 
Manager view. 


NOTE: On Windows hosts, Workbench starts WindISS.exe and opens a 
command shell. Do not close this shell or terminate WindISS.exe while your 
target connection is running. Workbench automatically terminates 
WindISS.exe and closes the shell when you disconnect from the target 
connection. 


Your connection is now visible in the Target Manager, as shown in Figure 18-1. 
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Figure 18-1 


18 Using the Instruction Set Simulator 
18.2 Connecting to the Simulator 


ISS Connection 


© Target Manager. x 


Bi N eles x 2)| S| #, 
= i} default(localhost) 
ce eats ies ebedi River ¥xWorks 6,1) 


> MPC8260 [stopped] 
[BB WRProbe_PPC750FX 


You can now download files and run application code through the simulator as 
you would if you were connected to a target. 
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Programming a VxWorks Boot 
ROM into Flash Memory 


19.1 Introduction 321 
19.2 Configuring The Target 322 
19.3 Flashing the Boot ROM 324 


19.1 Introduction 


This chapter describes how to use Wind River Workbench and your 
Wind River ICE SX or Wind River Probe to program a boot ROM into the flash 
memory on your target board. 


The purpose of a boot ROM is to load a kernel image, set boot parameters, and pass 
control to the loaded kernel image. 


Programming flash can be a complicated process, and is specific to your target 
board. If you are using a Wind River-supported target, all of the target-specific 
information is included in a file that is specific to your target. The file is located in 
your Workbench installation directory under the path 


installDir/vxworks-6.x/target/config/yourTargetBoard/target.ref 


The file includes flash addressing information, switch and jumper settings, and 
any other information that is specific to your target. If you are using a custom 
target, make sure you have detailed specifications about your target board. You 
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will need to know the size of your RAM workspace, where it is located, what type 
of flash device is on your target, and where it is located. 


19.2 Configuring The Target 


Make sure you have the following: 
= A working Wind River ICE SX or Wind River Probe with all required cables. 


« A target with a power supply (make sure the target is turned off before 
attaching the power supply). 


«= An Ethernet cable to connect your target to a LAN. 
«  Aserial cable to connect your target to a host computer. 
«Wind River Workbench installed on your host computer. 


Depending on which target you are using, you may need to modify several 
switches and jumpers so that your board will work correctly. These switch and 
jumper settings are specific to the target you are using. 


Hardware-specific information for each of the boards supported in this release is 
included in the file target.nr or target.ref, located in 
installDirlvxworks-6.x/target/config/yourTarget Board. It includes all the switch and 
jumper settings that are required to flash and run the boot ROM. Familiarize 
yourself with the board-specific information and use the information provided in 
that section to configure the switches and jumpers on your target correctly. 


If you are not using a Wind River-supported target board, make sure that the 
switches and jumpers are set to choose the flash device that you want to use and 
to use the proper clock frequency. If your target board has a switch that controls 
whether a debugger can attach to it, make sure that it is set to allow debugger 
control. 


19.2.1 Making Physical Connections 
The documentation for your Wind River ICE SX or Wind River Probe debugging 


tool explains how to make all physical connections correctly. For information 
about making the connection, and about applying power and establishing 
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communications with your target board, see the Wind River ICE SX for Wind River 
Workbench Hardware Reference or Wind River Probe for Wind River Workbench 
Hardware Reference. 


In the Workbench toolbar, click Window and select 
Show View > OCD Command Shell. 


If you have followed the instructions in your emulator’s Hardware Reference, you 
should see a Background Mode (>BKM>) prompt appear in the OCD Command 
Shell once you have successfully established communications. 


19.2.2 Testing Memory and Breakpoints 


The flash programming algorithm needs to run on the target. This requires a RAM 
workspace, to which the algorithm will download, and breakpoints, which are 
used to stop an erase and program operation at completion. 


Reading and Writing Memory 


Once you have established communications with the target, use the following 
procedure to make sure you can write to and read from the target. In this example 
we assume that the RAM workspace is 0x00000000. 


NOTE: A RAM workspace address of 0x00000000 is not appropriate for all targets. 
For Wind River-supported targets, you can find the necessary RAM workspace in 
your target’s target.ref file, located in 
installDirlvxworks-6.x/target/config/yourTargetBoard/target.ref. 


Wherever the RAM workspace is located on your target, you must make sure that 
memory is writable there. 


At the >BKM> prompt, enter dm 00000000 and press ENTER. Doing so displays the 
memory on your target at address 0. 


Next, enter sm 00000000 1234 and press ENTER to set the memory at address 0 to 
the value 1234. Enter dm 00000000 to display the memory at that address again. 


If you are communicating properly with your target, output is similar to that 
shown below: 
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>BKM>dm 00000000 

00000000: FF7C EFFE FEFF E3FE 0D01 OFBE FOFD BFB6 Si eaPscemets dad ree 
>BKM>sm 00000000 1234 
>BKM>dm 00000000 

00000000: 1234 EFFE FEFF E3FE 0D01 OFBE FOFD BFB6 .4............. 
>BKM> 


Testing Breakpoints 


Occasionally, you may have difficulty programming flash memory on your target 
if software breakpoints are not being hit properly. Test this functionality before you 
continue. Some basic tests are provided with Wind River tools to test this 
functionality. 


To use the test, enter the following commands at the >BKM> prompt in the OCD 
Command Shell: 


>BKM>df e 0 


>BKM>di 0 6 


$00000000 : 0x60000000 :ppc nop 
$00000004 : 0x60000000 :ppc nop 
$00000008 : 0x60000000 :ppc nop 
$0000000C : 0x60000000 :ppc nop 
$00000010 : Ox7COOO04AC :ppc sync 
$00000014 : OxX4BFFFFFO :ppc b 0x4 
>BKM>go 0 
>RUN>dr pe 
PC = 00000004 
>RUN>dr pe 
PC = 00000010 
>RUN>sb 8 
>RUN> 
!BREAK! - [msg12000] Software breakpoint; PC = 0x00000008 [EVENT Taken] 
>BKM> 
>BKM>rb 
>BKM> 


19.3 Flashing the Boot ROM 


Before you begin, make sure that a >BKM> prompt is visible in the OCD 
Command Shell in Workbench. 
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19.3.1 Playing a Register File 


Figure 19-1 


Play back the register file for your target board. The register file sets up access to 
memory and sets configuration options correctly (this can affect the setting of 
breakpoints). In some cases it also sets up the default flash algorithm. 


Click on the Playback icon in the OCD Command Shell. 
The OCD Command Shell Settings dialog appears, as shown in Figure 19-1. 


OCD Command Shell Settings 


*% OCD Command Shell Settings 


OCD Command Shell Settings 


MPC8540 


PlayBack File Display Background Communications 


v 
Input Log File wa Append 
al 


Browse... Append 


Full Log File 


{ OK ] Cancel 


Next to the PlayBack File field, click Browse. 


Browse for the appropriate register file for your target and click OK. 


19.3.2 Setting Up Chip Select 0 and Programming the Reset Configuration Word 


Depending on the target board you are using, you may need to program the reset 
configuration word and set up chip select 0 for your target. For example, most 82xx 
targets need to have the reset configuration word set correctly. 


Not all targets use the reset configuration word and chip selects. Check 
installDir/vxworks-6.x/target/config/yourTargetBoard/target.ref for information 
about whether these are necessary for your target. 


If you are not using a Wind River-supported target, you must determine the correct 
reset configuration word for the boot ROM. The reset configuration word is 
determined by the way you configure the boot ROM. Use a hex editor to open your 
boot ROM file and read the reset configuration word from that file. Your processor 
documentation should provide information about how to read the reset 
configuration word from that file. 
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19.3.3 Unlocking Flash 


On some target boards, you may need to unlock Sector 0 of the flash memory 
before you can program flash. Some targets do this with a series of commands; 
some use jumpers or on-board switches; and some do not need to be unlocked. The 
data sheet for the flash device on your target board should tell you whether 
unlocking is necessary, and also supply the necessary settings or commands. 


To run commands, click Window in the toolbar and select 
Show View > OCD Command Shell. Make sure a >BKM> prompt is visible in the 
OCD Command Shell. 


For example, to unlock the flash chip on a Sandpoint 8245 target, you would type 
the following commands: 


>BKM>sct picr1 fee00000 ££041a88 
>BKM>sct errdr1 feee00003 00 
>BKM>mml fec00000 4c580080 
>BKM>mml fee00000 00130400 
>BKM>mml fec00000 4c580080 
>BKM>dml fee00000 1 

FEE00000: 00130400 

>BKM> 


Once you enter these commands, Sector 0 is unlocked and you can program the 
flash memory. 


19.3.4 Programming Flash 
Once your target is set up, you can program the boot ROM into flash memory on 
your target. 
1. Open Wind River Workbench. 
2. Inthe toolbar, select Window > Open Perspective > Device Debug. 
3. Inthe toolbar, select Window > Show View > Flash Programmer. 


The Flash Programmer view appears, as shown in Figure 19-2. 
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Figure 19-2 Flash Programmer View 


fertenn tiie ©, Flash Programmer % CF Options | OCD Statistical... | Hardware Diagn... Cache Trace a! 


Configuration | Programming | Memory/Diagnostics _ 


Device Selection Configuration 
Current: Flash Bank Addresses 


Base: | OxffFFFFFF | Last: 


RAM Workspace 
Start; | Ox00000000 


Size; | 0 


Set/Edit Timeouts 


Program: 


Erase: 


4. Select the Configuration tab. 


Use the Configuration tab to set the base address and workspace for your 
target board. 


5. Inthe Device Selection area, select the correct flash device for your target. 


The physical characteristics of your flash bank should be included in the board 
specification and schematics that came with your target board. 


6. Inthe Configuration area, enter the base register for your target. 


7. Inthe RAM Workspace area, set the Start and Size fields to the correct value 
for your target, as described in 9. Programming Flash Memory. 


8. Select the Programming tab. 


The Programming tab appears, as shown in Figure 19-3. 
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Programming Tab 


OCD Command Shell (LONSEsnume-ui-iitsis Binary Upload CF Options OCD Statistical Code ... Hardware Diagnostics Cache Trace me 


‘Configuration Programming | Memory/Diagnostics 


10. 


11. 


12. 


Upper boundary address | 


Flash Programming Erase Sector Selection 
(JSend "IN" before each operation | oxff1o0000 


———— = 7 - OxfF108000 

(Enable pre-flash OxfF10c000 
OxfF110000 

(CJEnable post-flash | oxff120000 


Oxff140000 
Oxff180000 
Oxff1a0000 


Add/Remove Files OxfFicoo00 


Status File Path Start Addr... End Addr... Enabled Add file Oxff1e0000 


Select all | | Clear all 


(_]oOverride erase sector selection 


Lower boundary address | | 


Click Add File. 
A browser window appears. 
Navigate to the boot ROM file for your target board. 


The boot ROM files for Wind River-supported targets are located in 
installDirlvxworks-6.x/target/config. 


In installDir/vxworks-6.x/target/config, find the directory for your target 
board. 


This directory contains the bootrom.bin or bootrom.hex file for your target 
board. 


Select the bootrom.bin file for your board and click Open. The filename 
appears in the Add/Remove Files area. 


Workbench needs a .bin file to program flash. If your directory only contains 
a -hex file, you will need to convert it to .bin format by following Steps a 
through d. Otherwise, proceed to Step 13. 


a. Return to the Programming tab and click Convert File. 
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b. Navigate to the folder for your target board and select the bootrom.hex 
file. 


The File Conversion Utility dialog appears. Figure 19-4 shows the 
bootrom.hex file for a PowerQUICC II board. 


Figure 19-4 File Conversion Utility 


File Conversion utility 


File path 
Input path: C:\WindRiver\yxworks-6, 3\target\config\wrPpmc750Fx\bootrom_uncmp. hex 


Output path: " CrlWindRiver\vxworks-6.3\target}configwrPpmc750Fx\bootram_uncmp. bin 


Conversion output 


Address information 
Start: | 0xoo000000 


End: | OxfFfffFFF 


Convert File 
Convert and Add File 


c. Click Convert and Add File. 


The conversion output appears in the Conversion Output field. 


329 


Wind River Workbench for On-Chip Debugging 
User Tutorials, 2.6.1 


Figure 19-5 Conversion Output 


Conversion output 


convert ¥7,11D Copyright (c) 1996-2004 Wind River HSI 

convert S-Record file C:\WindRiver\wxworks-6,3\target\config\wrPpmc?50Fx\boott 
xtracting image From 'C:\WindRiver\yxworks-6.3\target\confighwrPpmc750Fx\boo 
riting flat binary image to 'C:\WindRiver\yxworks-6,3\target\confighwrPpmc750F: 

ower address: Ox0 

pper address: OxffffffFF 

xecution address: 0x00000000 

Mage written 

rocessing time: 0,109 seconds 


ead 
|w 


d. Click OK. 
The converted file appears in the Add/Remove Files tab. 


Figure 19-6 File Added to Add/Remove Files Tab 


| ; : : 
Tasks | Problems | Properties Build Console | Error Log Terminal eleekenieureitc® ©. Flash Programmer 


Programming | Add/Remove Files | Configuration | Memory;Diagnostics 


Status File Path Start Ad... End Add... Enabled 
& C:\WindRiverlyxworks-6.3\target\confighwrPpme?5.,.  Ox00000,,, OxO00bifdF vj} Add file 


13. Click on the value under the Start Address heading to highlight it. 


Before you program the file into flash, you need to set a memory offset bias so 
the boot ROM will begin at the base address of your flash bank. 
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The necessary bias can be found in 
installDir/vxworks-6.x/target/config/yourTargetBoard/target.ref. 


Select the check box under the Enabled heading to enable the file. 
Click on the Configuration tab. 
In the Configuration tab, click Select All. 


This selects all memory sectors for erasure. Wind River recommends that you 
do a full erase when programming a boot ROM. 


Click on the Programming tab. 


Verify that the Flash Driver, Flash Bank, and Workspace fields in the Flash 
Settings area of the Programming tab are set to the correct values. 


Click Erase/Program. 


Workbench erases the flash memory on your target and programs the flash 
with your boot ROM image. When it completes, the status bar at the bottom of 
the Programming tab shows that the download is complete. 


Click the Memory/Diagnostics tab. 
Click Refresh. 
The contents of the flash memory with the boot ROM image loaded appear. 


At this point, your boot ROM image is successfully programmed into the flash 
memory on your target. 


After you have programmed the boot ROM into flash, set the program counter at 
the first instruction and run and debug it as you would any other program. For 
information on how do this, see the Wind River Workbench User’s Guide. 
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20.1 Introduction 


This chapter describes how to use Wind River Workbench and your emulator to 
program a Linux bootloader into the flash memory on your target board. 


The purpose of a bootloader is to initialize target hardware, load the Linux kernel 
image, set boot parameters, and pass control to the loaded Linux image. 


There are many different bootloaders available, and different bootloaders (and 
different versions of the same bootloader) support different target boards. For 
demonstration purposes this chapter uses uboot, a bootloader commonly used for 
PowerPC targets. 


Programming flash can be a complicated process, and is specific to your target 
board. If you are using a Wind River-supported target, all of the target-specific 
information is included in a target.ref.linux file that is specific to your target. The 
file includes flash addressing information, switch and jumper settings, and any 
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other information that is specific to your target. To find the target.ref.linux file for 
your target, go to http://www.windriver.com/suppotrt. 


If you are using a custom target, make sure you have detailed specifications about 
your target board. You will need to know the size of your RAM workspace, where 
it is located, what type of flash device is on your target, and where it is located. 


This chapter provides detailed instructions about programming uboot into the 
flash memory on your target board using Workbench. 


20.2 Installing the Bootloader 


Download the bootloader you wish to use. For example, uboot is available for 
download at http://sourceforge.net/projects/u-boot/. 


NOTE: Different versions of U-Boot are supported for different kernel versions and 
architecture types. Make sure you download the correct version of uboot for your 
target board. 


To unpack the file and install the bootloader on your host, enter the following 
commands: 


$ tax xj£ bootloader_file 
For example, if you downloaded u-boot-1.1.1.tar.bz2, type: 

$ tar xjfu-boot-1.1.1.tar.bz2 
This command unpacks the files and creates the bootloader directory structure. 


Change directories so that you are in the new bootloader directory. 


20.3 Configuring and Building the Bootloader 


Wind River provides a website with detailed information about building and 
configuring a bootloader. This section provides a brief overview about how to 
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configure and build uboot. For more detailed information, go to 
http://www.windriver.com/suppotrt. 


Wind River Workbench supports the bootloader in two different ways. 
= Patching the Standard Installation 


Wind River includes uboot patches for some of the supported targets at 
http://www. windriver.com/support. To configure and build a bootloader 
using a Wind River patch, follow the instructions provided there. 


= Manually Modifying the boardConfig.h file 


Some of the supported targets require only minor modification to the standard 
bootloader configuration files. 


For boards supported in this manner, the following section describes how to 
modify the configuration file in a standard installation for your target. 


20.3.1 Configuring and Building the Bootloader Manually 


Modifying the boardConfig.h File 


To create a uboot image that you can download to your target, uboot uses a 
boardConfig.h file, which contains specific hardware settings. The name of the 
boardConfig.h file is specific to your target and is located in the 
ubootInstallDirlinclude/configs directory. 


If your specific board settings do not match the defaults in the boardConfig.h file, 
edit the file appropriately. 


The steps in this section describe how to edit the file for your target. 
NOTE: The bootloader initializes your target to run a Linux kernel. Any errors in 


uboot configuration may prevent the kernel from booting correctly or may cause 
it to fail later. 


1. From the top level of the U-Boot directory, type the following: 
S$ cd include/configs 
2. Open the boardConfig.h file for your target. 


All hardware options in this file must match your target. The next steps 
describe specific items that may need to change for your target. 
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NOTE: The items described are not a comprehensive list. Review the contents of 
the entire file carefully and make any changes that are required for your target. 


" Clock Speed 


Verify that the configuration information pertaining to clock speed (oscillator 
frequency) is correct for your target. 


For example, the sbc8260.h file contains the following two lines: 
#define CONFIG_8260_CLKIN (66 * 1000 * 1000) 

and 

#define CFG_SBC_MODCK_H 0x05 


These values are correct for a 66 MHz target. If you are using a 33 MHz target, 
change the lines to read: 


#define CONFIG_8260_CLKIN (33 * 1000 * 1000) 
and 
#define CFG_SBC_MODCK_H 0x01 


. Baud Rate 


Configure the baud rate to a value that works for your system. The console will 
run faster with a higher baud rate. 


= Ethernet MAC Address 


Change the Ethernet MAC address to the address of the Ethernet port on your 
target board. 


rN CAUTION: Make sure that the Ethernet MAC address you choose is unique on 
your network. Duplicate Ethernet MAC addresses on the same network will 
cause problems when you try to load the kernel onto your target. 


After you have examined the options and verified that they are correct for your 
target board, you can build a downloadable bootloader file for your target. 


Building a Downloadable U-Boot File 


Follow these steps to build a downloadable U-Boot file for your target: 
1. Change directories until you are at the top level of your uboot directory. 


2. Type the following command: 
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S$ make distclean 


This ensures that there are no build results remaining from any previous 
configurations. 


3. Configure U-Boot for your target. 
$ make ARCH=ppc CROSS_COMPILE=CrossCompilePrefix yourConfigString 


The values of CrossCompilePrefix and yourConfigString are based on your 
processor and flash device. 


For example, if you want to configure U-Boot to use the Wind River SBC 8260 
target, enter the following: 


S make ARCH=ppc CROSS_COMPILE=ppc_82xx- sbc8260_config 
4. Make the U-Boot downloadable image. 


$ make ARCH=ppc CROSS_COMPILE=CrossCompilePrefix dep 
$ make ARCH=ppc CROSS_COMPILE=CrossCompilePrefix a11 


For example, using the Wind River SBC 8260 target, enter the following: 


S make ARCH=ppc CROSS_COMPILE=ppc_82xx- dep 
S$ make ARCH=ppc CROSS_COMPILE=ppc_82xx- all 


Once these commands finish executing, three new files are included in the 
uboot directory, as shown in: 


= u-boot 
=  u-boot.bin 
= u-boot.srec 


The files generated during the build process are described in Table 20-1. 


Table 20-1 U-Boot Files 


File Name Description 
u-boot A .elf file image of uboot. 
u-boot.bin A flat binary executable image of uboot. 


u-boot.srec = A standard Motorola format of uboot for flash programming. 


u-boot, u-boot.bin, and u-boot.srec can be used to program the flash memory 
on your target. Use the file that works with Workbench and your emulator. 
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20.4 Configuring the Target 


Make sure you have the following: 
*»  Aworking emulator with all required cables. 


» A target with a power supply (make sure the target is turned off before 
attaching the power supply). 


» An Ethernet cable to connect your target to a LAN. 
*  Aserial cable to connect your target to a host computer. 
* Wind River Workbench installed on your host computer. 


Depending on which target you are using, you may need to modify several 
switches and jumpers so that your board will work correctly. These switch and 
jumper settings are specific to the target you are using. 


Hardware-specific information for each of the Wind River-supported boards in 
this release is included in the file target.ref.linux. Find the file specific to your 
board at http://www.windriver.com/support. It includes all the switch and jumper 
settings that are required to flash and run the bootloader. Familiarize yourself with 
the board-specific information and use the information provided in that section to 
configure the switches and jumpers on your target correctly. 


If you are not using a supported target board, make sure that the switches and 
jumpers are set to choose the flash device that you want to use and to use the 
proper clock frequency. If your target board has a switch that controls whether a 
debugger can attach to it, make sure that it is set to allow debugger control. 


20.4.1 Making Physical Connections 


The documentation for your Wind River ICE SX or Wind River Probe debugging 
tool explains how to make all physical connections correctly. For information 
about making the connection, and about applying power and establishing 
communications with your target board, see the Wind River ICE SX for Wind River 
Workbench Hardware Reference or Wind River Probe for Wind River Workbench 
Hardware Reference. 


In the Workbench toolbar, select Window > Show View > OCD Command Shell. 


If you have followed the instructions in your emulator’s Hardware Reference, you 
will see a Background Mode (>BKM>) prompt appear in the OCD Command Shell 
once you have successfully established communications. 
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20.4.2 Testing Memory and Breakpoints 


The flash programming algorithm needs to run on the target. This requires a RAM 
workspace, to which the algorithm will download, and breakpoints, which are 
used to stop an erase and program operation at completion. 


Reading and Writing Memory 


Once you have established communications with the target, use the following 
procedure to make sure you can write to and read from the target. In this example 
we assume that the RAM workspace is 0x00000000. 


NOTE: A RAM workspace address of 0x00000000 is not appropriate for all targets. 
For Wind River-supported targets, you can find the necessary RAM workspace in 
your target’s target.ref.linux file, located at http://www.windriver.com/suppotrt. 


Wherever the RAM workspace is located on your target, you must make sure that 
memory is writable there. 


At the >BKM> prompt, enter dm 00000000 and press ENTER. Doing so displays the 
memory on your target at address 0. 


Next, enter sm 00000000 1234 and press ENTER to set the memory at address 0 to 
the value 1234. Enter dm 00000000 to display the memory at that address again. 


If you are communicating properly with your target, output is similar to that 
shown below: 


>BKM>dm 00000000 

00000000: FF7C EFFE FEFF E3FE 0D01 OFBE FOFD BFB6 | Se a tg cat ie leiatvsu roel ocis 
>BKM>sm 00000000 1234 
>BKM>dm 00000000 
00000000: 1234 EFFE FEFF E3FE 0D01 OFBE FOFD BFB6 .4............. 
>BKM> 


Testing Breakpoints 


Occasionally, you may have difficulty programming flash memory on your target 
if software breakpoints are not being hit properly. Test this functionality before you 
continue. Some basic tests are provided with Wind River tools to test this 
functionality. 


To use the test, enter the following commands at the >BKM> prompt in the OCD 
Command Shell: 
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>BKM>sy progl1 0 


>BKM>di 0 6 


$00000000 : 0x60000000 :ppc nop 
$00000004 : 0x60000000 :ppc nop 
$00000008 : 0x60000000 :ppc nop 
$0000000C : 0x60000000 :ppc nop 
$00000010 : Ox7COOO04AC :ppc sync 
$00000014 : OxX4BFFFFFO :ppc b 0x4 
>BKM>go 0 
>RUN>dr pe 
PC = 00000004 
>RUN>dr pe 
PC = 00000010 
>RUN>sb 8 
>RUN> 
!BREAK! - [msg12000] Software breakpoint; PC = 0x00000008 [EVENT Taken] 
>BKM> 
>BKM>rb 
>BKM> 


20.5 Flashing the Bootloader 


Before you begin: 
* Copy the u-boot.bin file to your host computer. 


* Make sure that a >BKM> prompt is visible in the OCD Command Shell in 
Workbench. 


20.5.1 Playing a Register File 


Play back the register file for your target board. The register file sets up access to 
memory and sets configuration options correctly (this can affect the setting of 
breakpoints.) In some cases it also sets up the default flash algorithm. 


In the OCD Command Shell, click Playback. 
The OCD Command Shell Settings dialog appears, as shown in Figure 20-1. 
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Figure 20-1 OCD Command Shell Settings 


*%% OCD Command Shell Settings 


OCD Command Shell Settings 


MPC8s40 


PlayBack File [(¥] Display Background Communications 


Input Log File (Append 


Full Log File [_] Append 


Next to the PlayBack File field, click Browse. 


Browse for the appropriate register file for your target and click OK. 


20.5.2 Setting Up Chip Select 0 and Programming the Reset Configuration Word 


Depending on the target board you are using, you may need to program the reset 
configuration word and set up chip select 0 for your target. For example, most 82xx 
targets need to have the reset configuration word set correctly. Check your 
target.ref.linux file for information about the reset configuration word. 


If you are not using a Wind River-supported target, you must determine the correct 

reset configuration word for the bootloader. The reset configuration word is 

determined by the way you configure the bootloader. Use a hex editor to open the 
u-boot.bin file that you generated, and read the reset configuration word from that 

file. Your Motorola processor documentation provides information about how to 

read the reset configuration word from that file. 


20.5.3 Unlocking Flash 


On some target boards, you may need to unlock Sector 0 of the flash memory 
before you can program flash. Some targets do this with a series of commands; 
some use jumpers or on-board switches; and some do not need to be unlocked. The 
data sheet for the flash device on your target board should tell you whether 
unlocking is necessary, and also supply the necessary settings or commands. 


To run commands, select Window > Show View > OCD Command Shell. Make 
sure a >BKM> prompt is visible in the OCD Command Shell. 
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For example, on a Sandpoint 8245 target, you would type the following 
commands: 


>BKM>sct picr1l fee00000 ££041a88 
>BKM>sct errdr1 feee00003 00 
>BKM>mml fec00000 4c580080 
>BKM>mml fee00000 00130400 
>BKM>mml fec00000 4c580080 
>BKM>dml fee00000 1 

FEEO0000: 00130400 

>BKM> 


Once you enter these commands, Sector 0 is unlocked and you can program the 
flash memory. 


20.5.4 Programming Flash 


Once your target is set up, you can program the flash memory on your target with 
the bootloader. 


1. Inthe toolbar, select Window > Show View > Flash Programmer. 


The Flash Programmer view appears. 


Figure 20-2 Flash Programmer View 


feleohenn-theee ©, Flash Programmer CF Options OCD Statistical... Hardware Diagn... Cache Trace 


Configuration | Programming | Memory/Diagnostics | 


Device Selection Configuration 
Current: Flash Bank Addresses 


Base: | OxfFFFFFFF | Last: | 


RAM Workspace 
Start: = Ox00000000 | End: [ 


Size: | 0 


Set/Edit Timeouts 


Program: 


Erase: 


2. Select the Configuration tab. 


Use the Configuration tab to set the base address and workspace for your 
target board. 


3. Inthe Device Selection area, select the flash device that is on your target. 
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4. Inthe Configuration area, enter the base register for your target. 


5. Inthe RAM Workspace area, set the Start and Size fields to the correct value 
for your target, as described in 9. Programming Flash Memory. 


6. Click on the Programming tab. 


The Programming tab appears, as shown in Figure 20-3. 


Figure 20-3 Programming Tab 


OCD Command Shell [LONSEEn re iieaetdimts Binary Upload CF Options OCD Statistical Code ... Hardware Diagnostics Cache Trace | af 


Configuration | Programming | Memory/Diagnostics | 


Flash Programming Erase Sector Selection 
(_]Send "IN" before each operation | oxffiooo00 


r Oxff108000 
(JEnable pre-flash | oxff1dcooo 


OxfF110000 
[enable post-flash | Browse | | oxff120000 
OxfF140000 


Oxff180000 


F Oxff1a0000 
Add/Remove Files OxFF1cO000 


Status File Path Start Addr... End Addr... Enabled Add file Oxffte0000 
Convert file 


Select all 


O Override erase sector selection 


Lower boundary address 


Upper boundary address 


7. Click Add Files. 


A browser window appears. Browse for the u-boot.bin file and click Open. 
The file appears in the Add/Remove Files area of the Programming tab. 


8. Click under the Enable heading to enable the file for downloading. 


9. Verify that the Flash Driver, Flash Bank, and Workspace fields in the Flash 
Settings area of the Programming tab are set to the correct values. 


10. Click Erase/Program. 


Workbench erases the flash memory on your target and programs the flash 
with your uboot image. When it completes, the status bar at the bottom of the 
Programming view states that the download is complete. 
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11. Click the Memory/Diagnostics tab. 
12. Click Refresh. 
The contents of the flash memory with the U-Boot image loaded appear. 


At this point, your uboot image is successfully programmed into the flash memory 
on your target. 
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21.1 Introduction 
The function of a boot loader, whether a boot ROM for VxWorks or uboot or grub 


for Linux, is to initialize the hardware, set boot parameters, load a kernel image 
into RAM, and pass control to the loaded kernel image, as shown in Figure 21-1. 
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Figure 21-1 Loading a Kernel Image with a Boot Loader 
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The Wind River ICE SX and Wind River Probe tools can also perform these 
functions through the JTAG port, as shown in Figure 21-2. This can be useful for 
BSP or driver developers who may not have a boot ROM available or may be in the 
process of developing one. 
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Figure 21-2 Loading a Kernel Image with an Emulator 
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21.2 Bypassing the Boot Line Address -- VxWorks 


Ordinarily, the boot ROM passes the boot parameters to the kernel image using an 
agreed-upon BOOT_LINE_ADRS memory location. For example, most PowerPC 
targets use the address 0x4200. 


When the boot ROM retrieves and starts the kernel image through a TFIP server, 
the loaded image runs and uses the memory string at the BOOT_LINE_ADRS 
memory location as its boot parameters. 


However, when an emulator loads the kernel image instead of a boot ROM, it does 
not set the boot parameters, and the BOOT_LINE_ADRS memory location probably 
contains uninitialized memory. The cracking of the bootline reads the random 
values until it finds a 0x00/null string termination. This usually results in a 
message about an invalid boot line. 
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There are two ways of solving this problem: 
«Manually setting the BOOT_LINE_ADRS location. 
« Forcing the DEFAULT_BOOT_LINE. 


21.2.1 Manually Setting the BOOT_LINE_ADRS Location 


When setting up the boot parameters, the board looks at the beginning of the boot 
line memory location to crack the boot line, that is, to decode the boot parameter 
string into its individual fields: hostname, IP address, and so on. 


When the value at the beginning of the boot line memory location is zero, the boot 
line cracking function will use the DEFAULT_BOOT_LINE value specified in the 
config.h file in the BSP. 


Using a Wind River ICE SX or Wind River Probe, you can manually set the boot 
line memory location to zero before running the image, so the boot line cracking 
function will use the DEFAULT_BOOT_LINE value. 


To manually set the boot line address to zero, do the following: 

1. Make sure you have a >BKM> prompt in the OCD Command Shell. 

2. At the >BKM> prompt, type SM 4200 0 and press ENTER. 

NOTE: 0x4200 is only one example; it is the standard address for PowerPC targets. 


To find the correct BOOT_LINE_ADRS memory location for your target, consult the 
manufacturer’s documentation for your target processor. 


21.2.2 Forcing the DEFAULT_BOOT_LINE 


The other method is to force the default boot line by conditionally compiling in the 
FORCE_DEFAULT_BOOT_LINE construct. This construct is only available in 
certain Wind River-specific BSPs. 
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If the FORCE_DEFAULT_BOOT_LINE construct is available on your BSP, the 
config.h file will contain the following: 


/*® 

* If the FORCE_DEFAULT_BOOT_LINE is defined then the 

* DEFAULT_BOOT_LINE parameters are always used regardless of NVRAM 

* values specified at bootrom time. See target.nr for details. 

* This is usually used to debug downloaded images without a bootrom present. 
af 


#define FORCE_DEFAULT_BOOT_LINE 
Defining the FORCE_DEFAULT_BOOT_LINE construct informs the loaded kernel 


image that the DEFAULT_BOOT_LINE from the config.h file in the BSP should be 
used, regardless of the value at the BOOT_LINE_ADRS memory location. 


CAUTION: Make sure you undefine the FORCE_DEFAULT_BOOT_LINE construct 


before you ship your product. 


In the sysHwInit() sysLib.c file, the FORCE_DEFAULT_BOOT_LINE value is used 
to copy the default boot line information into the BOOT_LINE_ADRS location. 
The value of DEFAULT_BOOT_LINE is also specified in the config.h file. 


#define FORCE_DEFAULT_BOOT_LINE 
#ifdef FORCE_DEFAULT_BOOT_LINE 

strncpy (sysBootLine, DEFAULT_BOOT_LINE, strlen (DEFAULT_BOOT_LINE) +1) ; 
#endif /* FORCE_DEFAULT_BOOT_LINE */ 


21.3 Bypassing the Boot Line Setup -- Linux 


You can create, define, pre-set, and manage the Linux boot line (BL) parameters for 
your target board using low-level commands from the OCD Command Shell. This 
will allow you to define a new set of boot line parameters without re-compilation 
or rebooting from on-board ROM. 


The boot line commands are BL ADD, BL DELETE, BL DISPLAY, BL MODIFY, and BL 
UPLOAD. For a detailed description of all these commands, see the Wind River 
Workbench On-Chip Debugging Command Reference. 
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NOTE: To use the BL commands you must set both the CF BL and CF MMU 
configuration options to ENABLE. 


You can only use the BL commands in the OCD Command Shell. There is no 
BL-specific GUI for setting up boot parameters. 


The following example displays a customized set of boot line parameters for a 
particular distribution of Linux that have been generated by the BL commands and 
stored in the emulator’s NVRAM. On a GO command, these parameters will be 
loaded into the target memory and passed to Linux via a set of register pointers. 
This process is controlled by the emulator's run-time firmware DLL. 


Dynamic Boot Table: structure configuration 
Entry | Description | Value/String 

SAS ae |eaeek ss Soest eee ae an See 
00 MemStartAdd | 0x00000000 

01 | MemSize | 0x04000000 

02 | FlashStart | 0x40000000 

03 FlashSize | 0x00400000 

04 Flashoffset | 0x00040000 

05 | SRAMStart | 0x00000000 

06 SRAMSize | 0x00000000 

07 | IMMR_Base | 0xf0000000 

08 | BOOTFlags | 0x00000001 


09 IP_ADDR 0x00000000 

10 | ENETADDR[6] | 0x00a01lea87bcb 

11 | ETHSPEED | 0x6c79 

12 INTFREQ 0x0bcd3d80 

13 | vBUSFREQ | 0x01£78a40 

14 | CPMFREQ | 0x03ef1480 

15 | BRGFREQ | 0x01£78a40 

16 | SCCFREQ | 0x01f£78a40 

17 | vco | 0x07de2900 

18 | BAUDRATE | 0x00002580 

19 bi_mon_fnc | Ox0fffffff 

20 CmdStrg ->console=ttyS0,9600 root=/<- 
| ->dev/ram0 rw 


The Entry field is a sequential reference for each line item. 
* The Description field is an ASCII field only used for comment. 


* The Value/String field can contain a char, unsigned long or unsigned short 
value. 


* Unsigned long values are displayed in hexadecimal using 8 digits, as in Entry 
#1. 


« Unsigned short values are displayed in hexadecimal using 4 digits, as in Entry 
#11. 
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Char values are displayed as in Entry #20. 


Char string greater than 20 characters will be displayed on several lines, using 
arrows. 


Byte values are displayed as in Entry #10. 


21.4 Downloading the Kernel Image 


Once you have bypassed the boot setup, initialize your target board and download 
your kernel image using the Reset and Download view. 


1. 


Build your image using a VxWorks Image Project or a Linux Kernel Project. 


For information on building projects, see the Wind River Workbench User’s 
Guide. 


Connect to your Wind River ICE SX or Wind River Probe. 


For instructions on connecting to your emulator, see the Wind River ICE SX for 
Wind River Workbench Hardware Reference or the Wind River Probe for Wind River 
Workbench Hardware Reference. 


In the Target Manager view, click the OCD Reset and Download icon to bring 
up the Reset and Download view, and click under the Settings heading to 
configure it. 
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Figure 21-3 Reset and Download View 


%% WRISS_MPC8540 - MPC8540 


Modify attributes and launch. 


Name: WRISS_MPC8540 - MPC8540 


Main isi Projects to Build | # Reset | # Download | @# Instruction Pointer | # Run Options: ty Source | F) Common | 


Connection 
Connection to use: §'WRISS_MPC8540 {localhost} | (Hide unconnected 


WRISS_MPC8540 - WRISS_MPC8540 is connected. 


Core: | MPC8540 v 


arly 


4. Inthe Reset tab, choose your register file. 


Check the Play Register File box and click Browse. Navigate to the register file 
for your target board. 


For more information on register files, see 8. Configuring Target Registers. 


5. Still in the Reset tab, choose the type of initialization you wish to perform, 
using the IN or INN command. 


For more information on the IN and INN commands, see the Wind River 
Workbench On-Chip Debugging Command Reference. 
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Figure 21-4 Reset Tab 


% WRISS_MPC8540 - MPC8540 


Modify attributes and launch. 


Name: [ WRISS_MPC8540 - MPC8540. 


en = — 
@ main | Projects to Build | @ Reset | Download | @ Instruction Pointer | # Run Options | '3% Source | [1 Common 
MPCES4O 


v | Play register file | C:\WindRiver\workbench-2.5\dfw\0141 \host\registers|PowerPC\sSxx|windRiver_SBCIWRS ¥ 


v| Reset IN - Reset/setup regs be 


© Specified core 
Odallcores 
Cores tied on reset: 


Figure 21-4 shows the Reset tab set to play the register file for a Wind River 
PowerQUICC II 8260 target and issue the IN initialization command. 


6. Inthe Download tab, click Add Files... and navigate to the kernel image from 
your VxWorks Image Project or Linux Kernel Project. 


Figure 21-5 shows the Download tab set to download the vmlinux.elf file 
from a Linux Kernel Project. 


Figure 21-5 Download Tab 


% WRISS_MPC8540 - MPC8540 


Modify attributes and launch. 


Name: | WRISS_MPC8540 - MPC8540 


ponegeemeamencemanar s 
Main | = Projects: to Build | #- Reset @ Download | Instruction Pointer | Run Options | ty Source | F) Common e 


MPC8s40 
Filename Download Verify Load Symbols = Offset 


vinlinux - C: vmlinux ...J[¥] None v) 


Foesic=s 
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In the Instruction Pointer tab, set the start address for your file. 


Figure 21-6 shows the Instruction Pointer tab set to use the start address from 
the download file. It also has the Set Instruction Pointer After Download box 
checked. 


You can also select the Use Start Address From Symbol field and specify a 
symbol. For example, in VxWorks you would use the symbol sysInit. Or you 
can just specify a start address in hex. 


Figure 21-6 Instruction Pointer Tab 


® WRISS_MPC8540 - MPC8540 


Modify attributes and launch. 


Name: 


| WRISS_MPC8540 - MPC8540 


@ main | % Projects to Build | # Reset | # Download| @ Instruction Pointer | # Run Options | v Source | [1 Common 
mpces40 


| wy 


Set instruction pointer after download 


@Use start address From download file 


Ouse start address from symbol 


OvUse specified start address | 


8. 
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In the Run Options tab, specify the memory location to where you want the 
download file to run. By default it is set not to run after download, as in 
Figure 21-7. 
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Figure 21-7 Run Options Tab 


WW WRISS_MPCB540 - MPCB540 


Modify attributes and launch. 


Name: | WRISS_MPC8S40 - MPC8540 


——— 
@ main | & Projects to Build | # Reset | Download | @ Instruction Pointer | * Run Options | y Source | =) Common 
MPC8540 


@®Do not run 
ORun to symbol 
| ORun to address 


O)Run to end of program 
Break at Exit 


Be ae download SEAES 


Close 


For more information on the Reset and Download view, see the Establishing 
Communications chapter of your emulator’s Hardware Reference. 


9. Once you have entered the values you want, click Debug. 


The emulator initializes your target and downloads the kernel image.The 
OCD Console view opens to show the progress of the download, as shown in 
Figure 21-8. 


Figure 21-8 OCD Console View 


Tasks Problems Properties Build Console Error Log Terminal OCD Ci e OCD Command Shell Trace CF Options 


"Reset and Download 


Initializing Wind River ICE/TRACE oe Passed 

Driving RESET To Be High. Af o Passed 

Driving RESET To Be Low.. aaa Passed 

Release HRESET 7 Passed 

Testing For Target FREEZE Stat ' Passed 

Waiting For RESET To Be Released... 7 Passed 

Attempting To Enable Background Mode. ie Passed 

Testing BDM Communication, . : Passed 

Loading Internal Registers Passed 

Testing BDM Communicatior i Passed 

Initializing CPU Registers.. Passed 

Wind River ICE/{TRACE Initi te. Passed 
C:\workbench2.S\workspace\c_demo. pire “ox00000000- BE-diab_D... (9000000000000 OOOO OOOO) 
Loading symbols... Completed at Default Offset (<1 sec) 
Specified not to Run 

* Reset and Download Completed * 
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The kernel image is now downloaded to your target. Run and debug it as you 
would any other file. For information on running and debugging files, see the 
Wind River Workbench User’s Guide. 
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Kernel-Aware Debugging 


22.1 Introduction 


Wind River Workbench supports kernel-aware debugging for several operating 
systems other than VxWorks 6.x. Run control and data visibility for these operating 
systems are outlined in this chapter. 


22.1.1 VxWorks 5.5 


22.1.2 Linux 


The following VxWorks 5.5 kernel objects are viewable in Workbench: 
» Tasks 


The following Linux kernel objects are viewable in Workbench: 


» Processes 


» Threads 

The following Linux processor architectures are supported in Workbench: 
» MIPS 

» ARM9 

» ARMI11 

»= PowerPC 
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22.1.3 ThreadX 


The following ThreadX kernel objects are viewable in Workbench: 


« Threads 

= Timers 

» Mutexes 

» Semaphores 

» Memory Byte Pools 
"Memory Block Pools 
=" Message Queues 

« Event Flag Groups 


The following ThreadX processor architectures are supported in Workbench: 


= PowerPC 821 
= PowerPC 823 
= PowerPC 860 
= PowerPC 8240 
= PowerPC 8260 
= PowerPC 60x 
= PowerPC 44x 
= PowerPC 405 
=  MIPS32 4kx 


Additional processor support may be available from Express Logic at 
http://www.expresslogic.com/windriver_wb23.asp. 
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